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Q.  And  is  this  request  for  an  examination,  is  it  a  formal 
document? 

A.  Yes,  sir.  We  have  a  standard  group  of  information  that  we 

need. 

Q.  And  when  you  receive  —  when  you  conduct  an  examination, 
how  long  does  an  examination  typically  take? 

A.  It  can  range  anywhere  from  a  day  or  two,  to  months  or  even 
years . 

Q.  You  said  years? 

A.  Yes,  sir. 

Q.  Why  the  variance  between  how  much  time  something  would 

take? 

A.  We  have  wide  swaths  of  number  one  what  we're  looking  for, 
detail  of  how  in  depth  we  need  to  get  into,  but  also  simply  the  sheer 
volume.  Our  disk  drives  are  massive  today.  We  have  exams  that  could 
range  in  the  multi  terabytes,  which  simply  takes  a  long  time.  It's 
not  like  you  see  on  TV. 

Q.  Once  you're  done  with  an  examination,  what  do  you  do? 

A.  We  generate  a  report. 

Q.  Where  is  that  report  sent? 

A.  Ultimately  after  it's  reviewed  by  a  number  of  people  it 
will  end  up  back  to  the  case  agent. 
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Q.  And  is  this  always  --  is  it  a  formal  report,  informal 
report? 

A.  Either  or. 

Q.  Why  either  or? 

A.  It  depends  on  the  scope  of  what  was  needed.  Sometimes  if 
it's  a  quick  and  dirty  examination  and  there's  not  likely  to  be  any 
further  investigative  requirements.  We  may  do  an  AIR  type  format; 
however,  in  this  situation  or  when  it's  likely  to  be  adjudicated 
we'll  do  a  formal  forensic  report. 

Q.  You  say  AIR,  what  is  that? 

A.  That  is  a  CID  format  of  an  examination  —  investigative 
report.  It's  more  of  a  memo  type  arrangement. 

Q.  And  in  the  report  generating  process  does  anyone  review 
your  work  for  accuracy? 

A.  Yes,  sir. 

Q.  How  does  that  review  process  work? 

A.  We  have  a  peer  review  process  where  we  will  have  one  or 
more  other  examiners  in  our  office  review  the  report  and  any 
foundation  behind  it  to  make  sure  that  we've  covered  everything,  that 
the  findings  are  accurate  and  the  like.  Following  that  it  will  go 
through  one  or  more  levels  of  supervisory  review.  We'll  do  the  same 
thing . 
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Q.  And  when  you  are  assigned  a  piece  of  digital  media  as  part 
of  a  request  from  a  case  agent,  SAC,  do  you  work  on  the  media  alone? 

A.  No,  sir.  Not  always. 

Q.  Can  you  explain  that,  please? 

A.  In  some  cases,  where  it's  a  real  simple  one,  where  it's  a 
single  hard  drive,  we  may  do  it  ourselves,  but  in  many  cases  we  use  a 
collaborative  process,  we'll  split  the  case  up,  just  like  your  teams 
split  up  the  case  when  it  gets  complicated  into  different  tasks. 

We'll  do  the  same  thing. 

Q.  So,  if  you're  splitting  up  like  the  exam  of  one  piece  of 
digital  media,  how  does  that  work?  Are  you  all  working  off  the  same 
image? 

A.  If  it's  the  same  piece  of  evidence,  yes,  sir,  we'd  work  off 
the  same  copy. 

Q.  And  you  said  it  was  collaborative.  Can  you  explain  that 
please?  How  was  the  office  at  the  DFRB? 

A.  We  have  relatively  small  offices.  In  this  particular  case 
the  office  was  only  about  the  size  of  a  closet.  We  actually  sat 
right  next  to  each  other,  so  we  actually  can  talk  back  and  forth 
amongst  ourselves. 

ATC[CPT  MORROW]:  Just  one  moment. 
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Q.  Mr.  Johnson,  in  your  involvement  in  this  case.  Did  you 
examine  any  digital  media  associated  with  the  investigation  against 
PFC  Manning? 

A.  Yes,  sir. 

Q.  What  did  you  examine? 

A.  Forensic  evidence  from  a  MAC  Book  Pro  hard  drive  and  an 
external  drive. 

Q.  I  don't  know  if  the  judge  heard  you.  What  did  you  say? 

A.  I  had  a  forensic  image  of  a  MAC  Book  Pro  hard  drive, 

external  hard  drive. 

Q.  A  MAC  Book  Pro  hardrive,  what  is  a  MAC  Book  Pro? 

A.  It's  an  Apple  product  for  a  laptop. 

Q.  Let's  start  with  the  external  hard  disk  drive.  First,  what 
is  an  external  drive  or  a  hard  disk  drive? 

A.  External  drive  is  an  externally  connected  piece  of  storage 
media.  They  come  in  all  shapes  and  sizes.  In  this  case  it's  a 
container  that  contained  an  internal  hard  drive  that  was  in  turn 
connected  to  a  computer  with  a  USB. 

Q.  And  did  you  examine  the  actual  external  drive  collected  in 


this  case? 

A.  No,  sir. 

Q.  What  did  you  examine? 


7577 


© 


o 


1 

2 

3 

4 

5 

6 
7 


A.  We  examined  a  forensic  image  obtained  when  it  was  collected 
by  the  collecting  agent.  Agent  Calder  Robertson. 

Q.  Is  that  the  acquiring  agent? 

A.  Yes,  sir. 

Q.  And  to  your  knowledge,  where  was  this  item  collected? 

A.  PFC  Manning's  housing  unit  in  FOB  Hammer. 

Q.  And  who  asked  you  to  examine  the  image  of  the  external  hard 


8  drive? 

9  A.  I  don't  recall  specifically  who  assigned  that  particular 

10  piece  of  media,  but  ultimately  it  came  from  the  original  case  agent, 

11  Agent  Graham. 

12  Q.  And  let's  talk  about  your  process  of  examining  the  external 

13  hard  drive.  What  did  you  do  first? 

14  A.  We  checked  out  the  evidence  from  our  evidence  lockup, 

15  brought  it  back  to  our  examination  station,  made  a  working  copy;  that 

16  is,  simply  copying  to  our  examination  work  station.  We  then  loaded 

17  it  into  our  primary  forensic  tool,  EnCase  in  this  case,  and  validate 

18  the  image's  hash. 

19  Q.  Why  do  you  validate  the  image's  hash? 

20  A.  We  want  to  make  sure  that  the  evidence  file  matches  the  way 

21  it  was  originally  collected  in  the  field.  The  EnCase  will  calculate 

22  the  hash  during  my  examination,  come  up  with  a  mathematical  value. 

23  We'll  compare  that  with  the  value  that's  embedded  in  the  image  file 
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itself,  the  E01  format.  I  also  compare  that  with  the  value  that  was 
recorded  on  the  evidence  collection  documentation  file  from  Agent 
Robertson. 


Q.  So  were  there  any  verification  issues  with  the  hash  value 
for  the  external  hard  drive  when  you  examined  it? 

A.  No,  sir. 

Q.  During  your  examination  of  the  image  of  the  external  hard 
drive,  did  you  find  anything  of  interest  to  this  investigation? 

A.  We  did.  We  found  three  pieces  of  information  that  we  found 
that  might  be  related. 

Q.  And  what  were  those  pieces  of  information? 

A.  We  found  a  text  file;  we  found  a  PowerPoint  presentation 
and  a  video. 

Q.  Let's  start  with  the  text  file.  Where  was  this  text  file 
located  on  the  external  hard  drive? 

A.  It  was  stored  in  the  normal  allocated  file  system. 

Q.  And  when  you  reviewed  the  information  in  EnCase,  were  you 
able  to  determine  when  the  file  was  created? 

A.  Yes,  sir. 

Q.  How  would  you  determine  when  the  file  was  created? 

A.  The  file  system  meta  data  contains  file  creation  dates  and 
times . 


Q.  And  what  is  meta  data  for  the  Court? 
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A.  Meta  data  is  data  about  data.  In  this  case  the  file  —  the 
information  about  the  file  itself. 

Q.  And  how  does  EnCase  —  how  does  EnCase  show  you  the  Meta 
data  essentially,  if  you  just  could  explain  that,  please? 

A.  EnCase  in  this  situation  will  show  it  to  me  in  a  nice 
spreadsheet  like  format,  nice  grid. 

Q.  And  do  you  recall  when  this  text  file  was  created? 

A.  My  recollection  was  29  November  of  2009. 

Q.  When  you  found  this  text  file,  did  you  review  the  contents 

of  the  text  file? 

A.  I  did. 

ATC [CPT  MORROW]:  I'm  retrieving  what  has  been  marked  as 

Prosecution  Exhibit  24  for  Identification  [retrieving  PE  24  for  ID 
from  the  court  reporter] . 

I'm  handing  to  the  witness  what  has  been  marked  as 
Prosecution  Exhibit  24  for  Identification  [handing  PE  24  for  ID  to 
the  witness] . 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  Mr.  Johnson,  do  you  recognize  this  document? 

A.  I  do. 

Q.  And  what  is  it? 

A.  This  is  the  contents  of  the  text  file,  WL-press . txt . 
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Q.  And  does  this  document  accurately  depict  the  content  of  the 
text  file  you  found  on  the  internal  or  the  external  hard  disk  drive? 
A.  It  does. 

Q.  And  if  you  printed  this  text  file  as  you  found  it  on  the 
external  hard  disk  drive,  is  this  how  it  would  appear? 

A.  Yes. 

Q.  Again,  where  was  this  file  found? 

A.  It  was  in  the  allocated  file  system. 

ATC [CPT  MORROW]:  Your  Honor,  at  this  time  the  prosecution  moves 
to  admit  Prosecution  Exhibit  24  for  Identification  into  evidence  as 
Prosecution  Exhibit  24. 

ADC[CPT  TOOMAN] :  No  objection.  Your  Honor. 

MJ:  Prosecution  Exhibit  24  for  Identification  is  admitted.  May 

I  see  it,  please? 

[PE  24  for  ID  was  handed  to  the  military  judge.] 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  Mr.  Johnson,  you  said  you  also  found  a  PowerPoint  brief;  is 
that  correct? 

A.  That's  correct. 

Q.  And  where  was  this  PowerPoint  brief  located? 

A.  It  was  also  on  the  allocated  file  system. 

Q.  And  do  you  recall  the  name  of  that  —  the  name  of  the  file? 
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A.  Not  specifically.  I  believe  it  was  "OPSEC"  something.  It 
was  an  ODT  file  —  ODP  file. 

Q.  What's  an  ODP  file? 

A.  It's  an  open  office  presentation,  similar  to  PowerPoint. 

Q.  So  it's  like  the  free  - 

A.  Correct. 

Q.  -  free  version  of  PowerPoint. 

ATC [CPT  MORROW]:  Your  Honor,  I'm  handing  the  —  I'm  retrieving 
what's  been  marked  as  Prosecution  Exhibit  25  [retrieving  PE  25  for  ID 
from  the  court  reporter] . 

I'm  handing  the  witness  what  has  been  marked  as  Prosecution 
Exhibit  25  for  Identification,  before  that  I'm  handing  it  to  Captain 
To oman. 

[PE  25  for  ID  was  reviewed  by  CPT  Tooman. ] 

ATC  [CPT  MORROW]:  I'm  handing  the  witness  what  has  been  marked 

as  Prosecution  Exhibit  25  for  Identification  [handing  PE  25  for  ID  to 
the  witness] . 

I'm  retrieving  Prosecution  Exhibit  24  and  handing  it  back 
to  the  court  reporter  [returning  PE  24  to  the  court  reporter] . 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  Mr.  Johnson,  do  you  recognize  this  document? 

A.  I  do. 

Q.  What  is  it? 
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1  A.  It  is  the  PowerPoint  presentation  as  it  would  have  been 

2  printed  —  excuse  me,  the  open  office  presentation  as  it  would  have 

3  been  printed. 

4  Q.  And  again  open  office  presentation  —  what's  open  office 

5  presentation? 

6  A.  Open  office  is  the  open  source  version  that  would  be  a 

7  PowerPoint  clone. 

8  Q.  And  is  this  document  an  accurate  representation  of  the 

9  OPSEC  brief  you  were  just  referring  to  if  it  was  in  printed  form? 

10  A.  It  appears  to  be,  yes,  sir. 

11  ATC[CPT  MORROW]:  I'm  retrieving  what  has  been  marked  as 

12  Prosecution  Exhibit  25  for  Identification  [retrieving  PE  25  for  ID 

13  and  returning  to  the  court  reporter] . 

14  No  further  questions.  Your  Honor. 

15  MJ:  Cross-examination? 

16  ADC [CPT  TOOMAN] :  Yes,  Your  Honor.  If  I  could  have  just  a 

17  moment . 

18  CROSS-EXAMINATION 

19  Questions  by  the  assistant  defense  counsel  [CPT  TOOMAN] : 

20  Q.  Good  morning,  Mr.  Johnson. 

21  A.  Good  morning. 

22  Q.  You  spoke  a  little  bit  about  the  investigative  process  on 

23  direct  and  the  process  of  taking  forensic  images  and  what  you  do  with 
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those.  Would  it  be  fair  to  say  that  when  you  take  a  forensic  image 
and  you  perform  your  investigation,  you're  going  to  document  what  you 
find? 

A.  Yes,  sir. 

Q.  And  when  you're  doing  your  investigation,  you're  going  to 
have  things  that  you're  looking  for? 

A.  Yes,  sir. 

Q.  And  when  you're  talking  about  a  computer  or  a  hard  drive, 
there  are  a  lot  of  different  types  of  information  that  you  could  have 
on  that  particular  media? 

A.  Yes,  sir. 

Q.  You  could  have  emails? 

A.  Yes,  sir. 

Q.  You  could  have  PowerPoint  presentations? 

A.  Yes. 

Q.  You  could  have  Word  files  or  text  files? 

A.  Yes,  sir. 

Q.  And  all  of  those  are  potentially  valuable.  They  belong  to, 
in  all  likelihood,  the  person  who  owns  that  particular  media? 

A.  Yes,  sir. 

Q.  And  in  this  particular  case  you  were  looking  at  all  of 
those  sorts  of  things.  You  looked  at  everything  on  this  particular 
hard  drive? 
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A.  Yes,  sir. 

Q.  And  by  this  hard  drive,  I'm  talking  about  the  external  hard 
drive? 

A.  Yes,  sir. 

Q.  With  respect  to  this  case,  there  were  particular  types  of 
thing  that  you  were  looking  for.  You  were  looking  for  —  you  would 
have  been  looking  for  anything  that  implicated  WikiLeaks;  is  that 
correct? 

A.  That  is  correct. 

Q.  And  you  found  —  as  you  talked  about  on  direct,  you  found 
some  contact  information? 

A.  Yes,  sir,  what  appears  to  be. 

Q.  You  didn't  find  anything  else  on  that  hard  drive  that 
implicated  WikiLeaks? 

A.  I  don't  recall,  sir.  I  don't  believe  so. 

Q.  Would  you  have  noted  that  in  your  report? 

A.  Yes,  sir. 

Q.  You  would  have  also  been  looking  for  anything  that  would 

have  expressed  a  hatred  of  America  on  that  hard  drive? 

A.  We  wouldn't  have  been  looking  specifically  for  it,  but  it 
would  have  been  noted  as  relevant. 

Q.  Okay.  You  would  have  looked  at  everything  on  the  hard 
drive? 
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A.  Yes,  sir. 

Q.  And  if  you  would  have  seen  that,  you  certainly  would  have 
noted  it? 


A.  Yes,  sir. 

Q.  But  you  didn't  note  that  on  your  report? 

A.  No,  sir. 

Q.  Because  you  didn't  find  it? 

A.  I  didn't  find  anything,  sir. 

Q.  And  you  also  would  have  noted  if  you  found  anything  that 
would  have  related  to  terrorism? 

A.  Yes,  sir. 

Q.  If  there  was  any  sort  of  evidence  that  suggested  that  my 
client  was  sympathetic  with  terrorists  or  wanted  to  support 
terrorism,  you  would  have  noted  that? 

A.  Yes,  sir.  Certainly. 

Q.  But  you  didn't  note  anything? 

A.  I  did  not  discover  anything  of  that  nature. 

Q.  You  also  would  have  made  note  of  anything  that  would  have 
shown  a  transfer  of  funds? 

A.  If  I  had  discovered  anything,  yes. 

Q.  If  you  had  found  something  that  was  —  seemed  like  a  lot  of 
money  for  a  PFC  to  have,  you  would  have  noted  that? 

A.  Yes. 
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Q.  And  you  didn't  note  that  in  this  case? 

A.  I  did  not  observe  any  of  that  information. 

Q.  Okay.  And  going  back  to  --  actually,  no  further  questions. 

Your  Honor. 

MJ:  Redirect? 

ATC [CPT  MORROW]:  No,  Your  Honor. 

MJ:  Temporary  or  permanent  excusal? 

ATC [CPT  MORROW]:  Temporary. 

[The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 
the  courtroom . ] 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  requests  a  10-minute 
recess . 

MJ:  All  right.  Any  objection? 

CDC [MR.  COOMBS]:  No  objection.  Your  Honor. 

M J:  Court  is  in  recess  until  20  minutes  after  10:00. 

[The  court-martial  recessed  at  1013,  4  June  2013.] 

[The  court-martial  was  called  to  order  at  1025,  4  June  2013.] 

MJ:  Court  is  called  to  order.  All  parties  present  when  the 

court  last  recessed  are  present  in  court. 

Government,  ready  to  proceed? 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  offers  on  the 
record  a  stipulation  of  fact. 

MJ:  For  whom? 
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1  TC [MAJ  FEIN]:  Ma'am,  for  Special  Agent  Tony  Edwards,  PE  26. 

2  MJ:  You  mean  a  stipulation  of  expected  testimony? 

3  TC [MAJ  FEIN]:  I'm  sorry.  Yes,  Your  Honor,  a  Stipulation  of 

4  Expected  Testimony  for  Special  Agent  Antonio  Edwards,  dated  3  January 

5  2013,  Prosecution  Exhibit  26. 

6  It  is  hereby  agreed  by  the  Accused,  Defense  Counsel,  and 

7  Trial  Counsel,  that  if  Special  Agent  Antonio  Edwards  were  present  to 

8  testify  during  the  merits  and  pre-sentencing  phases  of  this  court- 

9  martial,  he  would  testify  substantially  as  follows: 

10  Since  March  of  2012,  I  have  been  employed  as  a  Special 

11  Agent  of  Homeland  Security  Investigations,  Department  of  Homeland 

12  Security  in  the  Atlanta  Field  Office,  empowered  by  law  to  investigate 

13  and  to  make  arrests  for  offenses  involving  the  unlawful  export  of 

14  goods  and  technology  to  destinations  outside  the  United  States.  Prior 

15  to  working  for  HSI,  from  March  2008  to  March  2012,  I  was  employed  as 

16  an  Special  Agent  with  the  United  States  Army  Criminal  Investigation 

17  Command,  USACIDC,  Computer  Crime  Investigative  Unit,  CCIU,  at  Fort 

18  Belvoir,  Virginia.  In  this  capacity,  I  was  responsible  for  the 

19  investigation  of  violations  pertaining  to  computer  intrusions  and  to 

20  other  types  of  malicious  computer  activity  directed  against  the  U.S. 

21  Army,  18  U.S.C.  Section  1030.  As  a  USACIDC  Special  Agent,  I  was  also 

22  authorized  to  investigate  crimes  involving  all  violations  of  the 

23  Uniform  Code  of  Military  Justice  and  other  applicable  federal  and 
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state  laws  where  there  is  a  U.S.  Army  or  Department  of  Defense 
interest . 

I  have  participated  in  and  conducted  investigations  of 
violations  of  United  States  laws  and  regulations  pertaining  to 
computer  intrusions  and  I  have  participated  in  the  execution  of 
search  warrants  on  individuals  and  companies. 

Before  working  for  USACIDC,  from  November  2007  to  November  2008, 
I  was  employed  as  an  Special  Agent  with  the  Bureau  of  Industry  and 
Security  (BIS),  Office  of  Export  Enforcement.  And,  from  May  2003  to 
October  2006,  I  was  a  Deputy  Prosecutor  for  Morgan  County,  Indiana. 
From  August  2000  to  August  2005,  I  served  in  the  Monroe  County, 
Indiana  Reserve  Deputy  Sheriff's  Department  as  a  Deputy  Sheriff, 
where  I  received  training  in  evidence  collection.  Further,  I  am  a 
graduate  of  the  Federal  Law  Enforcement  Training  Center's  Criminal 
Investigator  Training  Program,  where  I  also  received  training  in 
evidence  collection.  In  addition  to  being  employed  as  a  Special 
Agent,  I  currently  serve  in  the  Inactive  Ready  Reserves  (IRR)  as  a 
Judge  Advocate  in  the  United  States  Army  National  Guard,  District  of 
Columbia. 

In  2003,  I  received  a  Juris  Doctorate  from  Indiana 
University  and  was  subsequently  admitted  to  the  Indiana  bar.  I  have 
a  Bachelor  of  Arts  in  Psychology  from  the  University  of  North 
Florida,  and  a  Doctorate  of  Jurisprudence  from  Indiana  University 
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Bloomington  School  of  Law.  I  am  currently  licensed  to  practice  law 
in  Indiana. 

My  experience  as  a  State  Law  Enforcement  Officer,  a  State 
Prosecutor,  and  a  Special  Agent  has  included  the  investigation  of 
cases  involving  violent  and  non-violent  crimes  as  well  as  the  use  of 
computers.  I  have  also  received  training  and  gained  experience  in: 
interviewing  and  interrogation  techniques,  arrest  procedure,  crime 
scene  examination,  evidence  collection,  search  warrant  applications, 
the  execution  of  searches  and  seizures,  and  other  criminal  laws  and 
procedures.  Further,  I  have  completed  the  Department  of  Defense 
Cyber  Investigations  Training  Academy  courses:  "Introduction  to 
Computer  Hardware",  "Computer  Incident  Responders  Course",  and 
"Windows  Forensic  Examinations  —  EnCase".  Together,  this  afforded  me 
certification  as  a  Department  of  Defense  "Certified  Digital  Media 
Collector"  and  "Certified  Digital  Forensic  Examiner". 

I  follow  several  general  procedures  when  handling  evidence. 
I  review  the  custody  document  and  always  ensure  the  description  of 
the  evidence  matches  the  evidence  attached.  I  check,  for  example, 
that  recorded  serial  numbers,  markings  for  identification,  and 
condition  description  match  the  associated  evidence.  I  ensure  that 
the  proper  information,  such  as  date  and  time,  are  properly  and 
accurately  recorded.  Lastly,  I  maintain  secure  custody  of  the 
evidence  prior  to  transferring  it  to  another  individual. 
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In  this  particular  investigation,  I  assisted  with  witness 
interviews  and  the  handling  of  evidence.  In  so  doing,  I  worked  with 
SA  Charles  Clapper  and  Mr.  Garon  Young.  On  12  June  2010,  I  received 
several  pieces  of  electronic  evidence  related  to  this  investigation 
from  the  hands  of  Mr.  Adrian  Lamo  and  with  his  consent.  On  12  June 
2010,  Mr.  Adrian  Lamo  also  gave  signed  consent  to  law  enforcement 
personnel  on  two  separate  CID  Forms  87-R-E  to  search  his  electronic 
devices  for  "all  information  in  any  form,  pertaining  to 
communications  which  may  be  in  the  form  of  emails,  instant  messaging 
chats,  documents,  data,  computer  code,  log  files,  drawings, 
photographs,  or  any  other  data;  in  encrypted,  plain  text,  or  any 
other  format;  relating  to  Private  First  Class  Bradley  E.  Manning 
and/or  the  disclosure  of  classified  information  or  information  which 
is  the  property  of  the  U.S.  Government." 

The  first  piece  of  evidence  collected  and  further  handled 
was  a  Lenovo  Laptop  computer  with  a  Fujitsu  computer  hard  drive, 
serial  number:  K404T812MF4D,  recorded  as  Item  1  on  DA  Form  4137 
marked  as  document  number,  DN,  76-10,  and  known  as  "Lamo  Ubuntu  Hard 
Drive".  It  was  collected  from  Mr.  Adrian  Lamo  in  Sacramento, 
California,  on  12  June  2010.  The  second  piece  of  evidence  collected 
and  further  handled  was  an  HP  Mini  Brand  computer,  computer  serial 
number  CNU90513VT  with  a  Seagate  computer  hard  drive,  hard  drive 
serial  number:  5RE2C1QK,  recorded  as  Item  1  on  DA  Form  4137  marked 
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as  document  number,  DN,  77-10,  and  known  as  "Lamo  HP  Hard  Drive".  It 
was  collected  from  Mr.  Adrian  Lamo  in  Carmichael,  California  on  12 
June  2010. 

Using  the  DA  Form  4137,  I  properly  released  these  pieces  of 
evidence  to  SA  Clapper.  On  14  June  2010,  I  properly  regained 
possession  from  SA  Clapper  before  properly  releasing  them  to  the 
Evidence  Custodian,  Mr.  Garon  Young,  on  15  June  2010,  which  is 
documented  on  a  DA  Form  4137. 

While  in  possession  of  these  items,  I  maintained  control 
over  them,  stored  them  properly,  and  allowed  no  one  else  access  to 
them.  I  did  not  alter  the  evidence  in  any  way.  I  have  no  reason  to 
believe  this  evidence  was  damaged  or  contaminated  in  any  way.  After 
releasing  the  evidence  to  Mr.  Young,  I  had  no  further  interaction 
with  the  evidence. 

Prosecution  Exhibit  13  for  Identification  is  the  Lamo 
Ubuntu  hard  drive.  Item  1  of  DN  76-10.  Prosecution  Exhibit  14  for 
Identification  is  the  Lamo  HP  Hard  Drive,  Item  1  of  DN  77-10. 

Excuse  me,  Your  Honor. 

Ma'am,  the  United  States  calls  Mr.  Adrian  Lamo. 

[END  OF  PAGE] 
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ADRIAN  LAMO,  Civilian,  was  called  as  a  witness  for  the  government, 
was  sworn  and  testified  as  follows: 


DIRECT  EXAMINATION 

Questions  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  And  you  are  Mr.  Adrian  Lamo,  previously  from  the  Sacramento 
area,  California? 

A.  Yes,  I  am. 

Q.  Thank  you,  sir.  Mr.  Lamo,  how  do  you  know  Private  First 
Class  Manning? 

A.  From  a  series  of  conversations  we  had  online  in  2010. 

Q.  When  did  you  first  interact  with  Private  First  Class 
Manning? 


A.  On  or  about  May  20,  2010. 

Q.  And  what  was  the  form  of  that  interaction? 

A.  Initially  an  encrypted  email  that  I  received  from  Private 
Manning. 


Q.  And  how  did  you  know  that  email  was  from  Private  First 
Class  Manning? 

A.  Based  on  return  address  information  common  to  all  email. 

Q.  And  what  —  what  do  you  mean  by  return  address  information? 

A.  Information  indicating  where  it  originated  from,  which 
allows  the  recipient  to  reply. 

Q.  Can  you  explain  to  the  judge  --  is  that  an  email  address? 
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A.  Yes,  it  is. 

Q.  And  what  was  the  email  address? 

A.  Bradley.E.Manning@gmail.com  and  similar  but  different 
address  at  a  military  network. 

Q.  So  you  received  multiple  emails  from  Private  First  Class 
Manning? 

A.  Yes,  I  did. 

Q.  And  so  the  first  one  you  said  was  at  gmail.com.  Could  you 
explain  to  the  Court  what  the  second  email  you  received  —  what  the 
name  was  on  the  email? 

A.  I'm  sorry.  Which  one  were  you  referencing? 

Q.  The  second  one.  The  one  you  just  mentioned  about  an  Army 
email  address? 

A.  Yes,  it  had  a  string  of  letters  and  numbers  that  identified 
a  mountain  company  at  a  battalion  I  believe. 

Q.  And  did  it  have  Private  First  Class  Manning's  name  at  the 
beginning  of  it  as  a  user  name? 

A.  Yes,  his  name  was  prepended  as  a  user  name. 

Q.  What  happened  after  you  received  the  initial  email? 

A.  The  initial  one  I  initially  disregarded  due  to  a  high 
volume  of  email.  After  receiving  several  more,  I  wrote  back 
suggesting  that  the  user  should  perhaps  contact  me  via  AOL  instant 
messenger  to  have  a  more  direct  chat. 
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Q.  Was  this  email  encrypted  or  not? 

A.  The  one  which  I  sent  in  reply  was  not  to  the  best  of  my 
recollection. 

Q.  Was  the  email  that  was  sent  to  you  encrypted? 

A.  Yes,  it  was. 

Q.  And  could  you  explain  to  the  Court  what  that  means? 

A.  Encryption  encodes  the  email  to  a  particular  user  or  rather 
to  a  particular  user's  cypher  so  that  only  that  intended  recipient  is 
supposed  to  be  able  to  read  it. 

Q.  What  is  a  cypher? 

A.  In  this  case  public  key. 

Q.  What  do  you  mean  by  public  key? 

A.  Series  of  codes  which  instruct  the  computer  how  to  encrypt 
the  message  in  such  a  way  that  the  recipient  will  be  able  to  decrypt 
it. 

Q.  Were  you  able  to  read  the  initial  email  from  PFC  Manning? 

A.  I  was  not. 

Q.  Why  not? 

A.  He  had  specified  an  incorrect  cypher,  one  which  I  formerly 
used  but  had  fallen  out  of  use. 

Q.  How  does  one  find  this  cypher,  this  code? 

A.  There  are  public  servers  called  key  servers  which  contain 
collections  of  keys  so  users  can  find  themselves  more  easily. 
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Q.  And  when  did  you  then  realize  when  you  started  chatting 
this  was  Private  First  Class  Manning? 

A.  There  was  a  particular  point  in  our  interactions  where 
Private  Manning  mentioned  his  name  was  Brad  and  I  with  a  certain 
amount  of  surprise  replied,  "Oh,  I'm  an  idiot.  You  are  that  guy  from 
the  emails." 

Q.  And  how  did  you  chat  with  Private  First  Class  Manning? 

A.  Via  a  service  operated  by  America  Online  called  AOL  Instant 

Messenger  and  through  a  free  third  party  program  using  that  service. 

Q.  So  what  program  did  you  use? 

A.  Pidgin.  P-I-D-G-I-N. 

Q.  Could  you  explain  briefly  —  so  the  network  you  used  was 

American  Online  Instant  Messaging? 

A.  America  Online,  yes. 

Q.  You  did  not  use  American  Online  Instant  Messaging  program? 

A.  No.  There  were  numerous  chat  clients  that  support  the 
service  but  are  not  made  by  America  Online  themselves. 

Q.  Were  these  chats  encrypted? 

A.  Yes,  they  were. 

Q.  What  does  that  mean? 

A.  That  to  a  third  party  intercepting  them  on  the  wire,  they 
would  presumably  be  unreadable,  but  the  intended  recipients  would  be 
able  to  receive  them. 
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Q.  Mr.  Lamo,  you  seem  to  know  more  than  the  common  person 
about  computers.  What  is  your  experience  with  computers  and 
networks? 

A.  I  have  experience  in  penetration  testing,  that  is  auditing 
the  security  of  computers  networks  conducting  review  of. open  source 
intelligence  related  to  security,  and  finding  ways  to  bypass  and 
improve  security. 

Q.  And  in  that  —  how  many  years  of  experience  in  those  fields 
do  you  have? 

A.  More  than  15. 

Q.  In  those  15  years  have  you  been  arrested? 

A.  Yes,  I  have. 

Q.  Have  you  been  arrested  based  on  activities  related  to  that 
field? 

A.  Yes,  I  have. 

Q.  And  what  for? 

A.  For  unlawful  access  to  computer  networks  at  the  New  York 
Times  Company,  Microsoft  and  Lexus  Nexus. 

Q.  When  did  this  occur? 

A.  The  course  of  conduct  took  place  in  2002.  The  arrest  took 
place  in  2003,  and  the  conviction  in  2004. 

Q.  So  you  were  convicted? 

A.  Yes,  I  was.  I  pled  guilty. 
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1  Q.  Did  you  confess  to  those  crimes  when  you  pled  guilty? 

2  A.  Yes,  I  did. 

3  Q.  Going  back,  Mr.  Lamo,  when  did  you  first  start  chatting  on 

4  American  Online  Instant  Messaging  with  Private  First  Class  Manning? 

5  A.  On  or  about  May  20th,  2010. 

6  Q.  How  did  you  know  once  the  chat  started  that  it  was,  in 

7  fact.  Private  First  Class  Manning? 

8  A.  During  the  course  of  the  chats,  I  suggested  to  the  user 

9  that  perhaps  we  could  connect  on  Facebook.  Once  we  did  connect  on 

10  Facebook,  a  social  networking  site  where  users  can  browse 

11  information,  about  one  another,  I  ascertained  that  the  name  of  the 

12  user  was  the  same  name  as  the  sender  of  the  emails  which  I  previously 

13  received. 

14  Q.  Is  this  something  you  do  for  most  individuals  that  you  chat 

15  with? 

16  A.  Yes.  Facebook  is  a  very  popular  social  network  through 

17  which  many  people  connect. 

18  Q.  And  what  were  your  conclusions  based  off  of  your  analysis 

19  of  Facebook  and  comparing  that  to  the  chats? 

20  A.  Based  on  the  user  description  of  themselves,  both  in  the 

21  chats  and  on  Facebook,  as  well  as  return  the  email  address,  I 

22  ascertained  that  I  was  talking  to  somebody  who  went  by  Bradley  E. 
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Manning,  who  was  associated  with  the  military  on  all  three  networks 
and  was  presumably  the  same  user 

Q.  What  was  the  moniker,  the  user  name,  used  in  chat  between 
you  and  PFC  Manning? 

A.  I'm  sorry.  Mine  or  his? 

Q.  Both. 

A.  Mine  was  screen  name  adrianonaol,  which  was  recorded  as 
info@adrianlamo.com.  The  defendant's  was  bradass87. 

Q.  Did  you  only  use  the  Pidgin  program  to  chat  through 
American  Online  Instant  Messaging? 

A.  That  is  correct. 

Q.  How  many  computers  did  you  use  during  this  time  to  chat 
using  Pidgin,  the  program? 

A.  I  used  two  different  computers. 

Q.  How  many  computers  at  the  time  did  you  have  access  to  or 

own? 

A.  More  than  two,  fewer  than  five. 

Q.  Did  you  only  use  these  two  computers  that  you  are 
referencing  to  chat  with  Private  First  Class  Manning? 

A.  Yes. 

Q.  What  were  those  two  computers? 

A.  One  was  a  Lenovo  Think  Pad.  The  other  was  an  HP  mini. 

Q.  Lenovo  Think  Pad,  is  that  desktop,  laptop? 
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1  A.  It  is  a  laptop  made  by  the  successor  to  IBM  in  the  Think 

2  Pad  line. 

3  Q.  HP-mini,  could  you  describe  that  for  the  Court? 

4  A.  It  was  what  was  colloquially  known  as  a  netbook,  small.  Low 

5  powered  computer,  mostly  used  for  online  activity. 

6  Q.  Where  did  you  conduct  these  chats? 

7  A.  In  the  vicinity  of  Carmichael,  variously  at  my  residence, 

8  at  Starbucks  and  at  a  different  Starbucks  within  a  Safeway  that 

9  offered  internet  access,  so  internet  cafes  and  at  home. 


10 

Q. 

Did  you  record  these  chats? 

11 

A. 

Yes,  I  did. 

12 

Q. 

Was  it  your  normal  practice  to  record  the 

chats? 

13 

A. 

Pidgin  at  that  time  and  possibly  still  by 

default  recorded 

14 

all  chats. 

So,  yes. 

15 

Q. 

So  did  you  activate,  I  guess.  Pidgin,  did 

you  affirmatively 

16 

tell  Pidgin  to  record  those  chats? 

17 

A. 

No.  It's  not  immediately  evident  to  users  that  that 

18 

feature  is  enabled.  I  would  have  had  to  affirmatively  disable  it. 

19 

Q. 

You  had  not  done  that? 

20 

A. 

I  had  not. 

21 

Q. 

You  recorded  all  chats  with  all  people? 

22 

A. 

Yes,  I  did. 
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Q.  Did  anyone  else  have  access  to  these  computers  at  the  time 
you  were  chatting? 

A.  No.  Access  is  prevented  by  various  physical  and 
technological  access  countermeasures. 


Q. 

What  do  you  mean  by  that? 

A. 

Encryption,  password  and  physical  inaccessibility. 

Q. 

Let's  start  with  physical  inaccessibility.  How  were  they 

not  physically  accessible  to  anyone  else? 


A. 

In  that  they  were  generally  on  my  person.  When  I  went  out 

I  went 

out  usually  with  one  of  them  and  the  other  one  I  would  keep 

locked 

away. 

Q. 

When  did  the  chats  first  start? 

A. 

On  or  about  May  20th  of  2010. 

Q. 

When  did  they  end? 

A. 

On  or  about  May  26th  of  2010. 

Q. 

You  kept  the  computers,  two  computers  on  your  person 

between  those  days? 


A. 

Computer  geeks  do  not  always  leave  the  house  much. 

Q. 

Thank  you,  Mr.  Lamo,  but  did  you  keep  them  on  yourself? 

A. 

Yes,  I  did. 

Q. 

When  you  went  to  Starbucks,  you  had  both  computers? 

A.  No.  As  I  say,  I  travel  with  one  to  Starbucks  and  I  would 
keep  the  other  one  locked  away  in  my  quarters. 


7601 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 


G 


J 


Q.  And  then  what  prevented  someone  in  your  quarters  or  if  you 
got  up  from  Starbuck' s  desk  from  accessing  the  actual  information  on 
the  computer? 


A. 

They  would  require  a  password  in  order  to  access  the 

computer. 

Then  a  pass  phrase  as  well  in  order  to  decrypt  the  drive. 

Q. 

How  many  people  know  that  password  or  pass  phrase  at  the 

time? 


A. 

At  the  time  only  myself. 

Q. 

You  didn't  share  that  with  anyone? 

A. 

No.  I  was  the  only  authorized  user  and  the  only  one 

technically  capable  of  accessing  that  computer 


Q. 

When  did  you  first  meet  with  United  States  Army  CID  agents? 

A. 

On  or  about  the  dates  of  May  —  what  —  CID,  sorry. 

Q. 

Yes.  United  States  Army  CID  agents? 

A. 

I  believe  on  or  about  June  12th  of  2010. 

Q. 

And  who  did  you  meet  with? 

A. 

Special  Agent  Toni  Edwards. 

Q. 

And  did  Special  Agent  Toni  Edwards  collect  any  evidence 

from  you? 


A. 

Yes,  he  did. 

Q. 

What  did  he  collect;  what  computer  or  hardware  did  he 

collect? 
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A.  Special  Agent  Edwards  collected  a  Fujitsu  hard  drive  from 
the  Lenovo  Think  Pad  and  the  HP  mini  itself  in  its  entirety. 

Q.  At  the  time  he  collected  those  were  both  the  hard  drives, 
the  Fujitsu  you  just  spoke  about,  and  HP  mini  laptop,  were  the  both 
in  working  —  proper  working  condition  at  the  time  - 

A.  Yes,  they  were. 

Q.  -  you  gave  them  to  him? 

Did  you  ever  copy  —  make  copies  of  those  chat  logs 
between  the  time  of  the  chats  and  giving  those  computers  —  the 
computer  and  hard  drive  to  Special  Agent  Edwards? 

A.  Yes,  I  did. 

Q.  Did  you  ever  manipulate,  change,  alter,  delete,  edit  the 
original  logs  that  were  on  your  computers? 

A.  The  original  logs  as  preserved  by  Pidgin  were  no  way  edited 
or  redacted. 

Q.  But  you  did  alter,  edit,  redact  other  versions  of  the  logs? 

A.  Yes,  ones  which  I  shared. 

Q.  What  do  you  mean  by  "shared"? 

A.  With  people  not  involved  in  the  investigation. 

Q.  You  shared  these  logs  at  some  point? 

A.  Yes. 

Q.  What  people  did  you  share  these  logs  with? 
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A.  A  journalist  at  Wired,  Kevin  Lee  Poulsen,  and  Ellen 
Nakashima  at  the  Washington  Post. 

Q.  And  those  versions  that  you  shared,  were  those  copies  of 
the  originals  or  altered  copies? 

A.  They  were  copies  which  contained  redactions. 

Q.  You  did  not  alter  the  originals? 

A.  I  did  not. 

Q.  How  do  you  know  that  you  did  not  alter  the  originals? 

A.  At  no  time  did  I  save  them  or  even  open  them  in  any  way 
capable  of  saving  them.  You  can  open  a  file  as  a  read  only,  which 
what  I  did. 

Q.  When  you  surrendered  digital  media  to  Special  Agent 
Edwards,  did  you  sign  over  that  evidence  on  custody  form? 

A.  Yes,  I  did. 

Q.  Did  you  sign  that  form? 

A.  Yes,  I  did. 

Q.  Did  you  give  Special  Agent  Edwards  any  other  laptops  or 
computer  hard  drives? 

A.  I  gave  Special  Agent  Edwards  only  the  Fujitsu  hard  drive 
from  the  Lenovo  and  the  HP  Mini. 

Q.  Now,  Mr.  Lamo,  have  you  ever  been  diagnosed  with  mental 
health  conditions? 

A.  Yes,  I  have. 


7604 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


G  O 


Q.  And  what  are  those? 

A.  Asperger  Syndrome,  a  form  of  autism;  major  depression  and 
generalized  anxiety. 

Q.  Do  those  conditions  generally  affect  your  memory? 

A.  No,  they  do  not.  And  they  are  not  known  to  in  others 
either . 

Q.  Do  you  take  prescribed  medications  to  assist  you  with 
living  with  those  conditions? 

A.  Yes,  I  do. 

Q.  Have  those  medications  ever  affected  your  memory? 

A.  They  have,  yes. 

Q.  Have  you  ever  used  those  medications  in  a  manner  that  could 
affect  your  memory? 

A.  Yes. 

Q.  And  would  your  chatting  with  Private  First  Class  Manning  in 
May  of  2010,  were  you  using  those  medications  in  a  way  that  affected 
your  memory? 

A.  I  was  not. 

Q.  Between  the  time  of  your  chats  in  May  2010,  and  turning 
over  the  hard  drive  and  laptop  to  Special  Agent  Edwards  on  12  June 
2010,  were  you  using  those  medications  that  in  any  way  affected  your 
memory? 

A.  I  was  not. 
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Q.  And  today,  Mr.  Lamo,  in  this  court-martial  and  this 
testimony,  are  you  suffering  from  any  memory  loss  either  from  your 
diagnosed  medical  conditions  or  medication  use? 

A.  No. 

TC [MAJ  FEIN]:  No  further  questions.  Your  Honor. 

MJ:  Defense? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

CROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [Mr.  COOMBS]: 

Q.  Mr.  Lamo,  in  early  2000,  you  committed  a  string  of  attacks 
against  several  large  companies,  correct? 

A.  A  string  of  offenses,  yes. 

Q.  In  2004,  you  pled  guilty  to  computer  fraud? 

A.  Yes,  I  did. 

Q.  You  received  a  6-month  sentence  of  house  arrest,  2  years' 
probation? 

A.  That’s  correct. 

Q.  You  were  22  years  old  at  the  time  that  you  pled  guilty? 

A.  I  was. 

Q.  Same  age  that  PFC  Manning  was  when  he  started  his  IM  chat 
with  you? 

A.  That  is  also  correct. 
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Q.  As  you  said,  your  IM  chats  began  on  or  about  the  20th  of 


May  2010? 

A. 

Q. 

A. 

Q. 

contacted 

A. 

Q. 

A. 

Q. 

concerned 
with  you? 


Yes . 

And  you  chatted  until  on  or  about  the  26th  of  May  2010? 
That  is  also  correct. 

Now  the  day  after  your  initial  chat  with  PFC  Manning  you 
law  enforcement? 

That's  correct.  Well,  Army  Counterintelligence. 

Law  enforcement? 

Yes . 

And  you  contacted  law  enforcement  because  you  were 
about  the  type  of  information  that  PFC  Manning  had  shared 


A.  Yes. 

Q.  You  were  also  concerned  for  PFC  Manning's  life? 

A.  Yes. 

Q.  And  after  contacting  law  enforcement  you  continued  to  chat 
with  PFC  Manning  for  the  next  4  days? 

A.  That  is  correct. 

Q.  And  based  on  your  conversations,  you  determined  that  PFC 
Manning  was  young? 

A.  Yes. 

Q.  You  believed  he  was  ideologically  motivated? 
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A. 

You  also  saw  him  as  well  intentioned? 
From  his  point  of  view,  yes. 


Now  you  testified  on  direct  that  PFC  Manning  identified 


And  you  testified  on  direct  that  he  said  basically,  "I'm 


17  Q.  And  based  upon  your  conversation,  you  saw  someone  very 

18  familiar  that  day? 

19  A.  Yes. 

20  Q.  You  saw  a  young  22  year  old  with  good  intentions,  much  like 

21  you  were? 

22  A.  That  was  not  lost  on  me,  correct. 

23  Q.  You  did  not  know  PFC  Manning,  correct? 
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A.  Not  personally,  no. 

Q.  The  two  of  you  never  met  in  person? 

A.  No. 

Q.  PFC  Manning  told  you  that  he  had  done  some  - 

TC [MAJ  FEIN]:  Objection,  Your  Honor,  hearsay. 

CDC [MR .  COOMBS]:  In  this  instance.  Your  Honor,  not  offered 

for  the  truth,  effect  on  the  listener. 

MJ:  What  effect  on  the  listener? 

CDC [MR.  COOMBS]:  To  explain  the  conduct  of  the  listener  from 

this  point.  If  I  can  ask  the  question  and  then  --  I'll  caution  the 
witness  not  to  answer,  but  if  I  can  ask  the  question  before 
objection,  then  we'll  see  what  my  question  is. 

MJ:  Well,  that's  sustained  on  hearsay  basis.  I'm  —  can  you 

get  there  without  eliciting  the  hearsay? 

CDC [MR.  COOMBS]:  Well,  in  this  instance,  ma'am,  if  I  were 

allowed  to  ask  the  question,  I  was  going  to  say,  "PFC  Manning  told 
you  he  had  done  some  background  research  on  you."  The  issue  there  is 
going  to  be  the  effect  on  this  listener  to  indicate  how  they 
continued  their  conversation.  I'm  not  offering  for  the  truth  that 
PFC  Manning  did  the  background  research,  just  to  explain  the  nature 
of  this  individual's  response. 

MJ:  The  initial  question  wasn't  that  question.  You  can  ask  that 

question. 
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CDC [MR .  COOMBS]:  That  was  my  question,  ma'am. 

MJ:  Say  it  again. 

CDC [MR .  COOMBS]:  I'm  reading  it  exactly,  "PFC  Manning  told 

you  that  he  had  done  some  background  research  on  you."  I  said,  "PFC 
Manning  told  you,"  and  then  I  got  the  objection. 

MJ:  Was  that  the  question  you  objected  to? 

TC [MAJ  FEIN]:  Yes,  Your  Honor.  The  leading  part  that  PFC 
Manning  told  him  something. 

CDC [MR.  COOMBS]:  Well,  this  is  cross  so  I  can  lead. 

MJ:  I  know  you  can.  I'm  just  concerned  about  getting  the 

hearsay  that  —  try  to  figure  out  a  different  way  to  do  it. 

Questions  continued  by  the  civilian  defense  counsel  [Mr.  COOMBS] : 

Q.  In  this  instance,  were  you  made  aware  that  PFC  Manning  knew 
facts  about  you? 

A.  Yes. 

Q.  And,  in  fact,  you  were  a  supporter  of  LGBT,  correct? 

A.  Yes. 

Q.  And  LGBT  is  Lesbian,  Gay,  Bisexual  and  Transgender 
Community? 

A.  Yes. 

Q.  And  in  1998,  you  were  appointed  to  the  LBGT  Youth  Task 
Force  by  the  San  Francisco  Board  of  Supervisors. 

A.  That  is  correct. 
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Q.  You  also  became  a  volunteer  for  gay  and  lesbian  media  for 
Planetout.com.  Is  that  correct? 

A.  Yes,  it  is. 

Q.  And  Private  First  Class  Manning  knew  that  you  were  a  threat 
analyst  and  a  grey  hat  hacker.  Is  that  correct? 

TC [MAJ  FEIN]:  Objection,  Your  Honor.  Speculation  of  what  PFC 
Manning  did  or  didn't  know. 

CDC [MR.  COOMBS]:  The  witness  won't  need  to  speculate.  Your 

Honor. 

TC [MAJ  FEIN]:  Then  it's  hearsay.  Your  Honor,  because  it's  based 
off  of  what  PFC  Manning  did  or  didn't  tell  him. 

MJ:  It  is  hearsay.  What  is  it  being  offered  for? 

CDC [MR.  COOMBS]:  Again,  the  effect  on  the  listener  for  the 

nature  of  the  conversation.  Your  Honor,  not  for  the  truth  of  the 
matter  asserted.  To  explain  why  PFC  Manning  reached  out  to  him  and 
the  nature  of  their  conversation. 

MJ:  Alright.  I'll  let  you  have  some  latitude  here.  It  is  a  — 

again,  it's  a  trial  before  me.  If  it's  coming  in  on  any  kind  of 
hearsay  basis.  I'll  disregard  it.  Go  ahead. 

CDC [MR.  COOMBS]:  I  understand.  Your  Honor. 
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Questions  continued  by  the  civilian  defense  counsel  [Mr.  COOMBS]: 

Q.  So  you  knew  that  he  was  aware  that  you  were  a  threat 
analyst  and  a  Gray  Hat  Hacker,  correct? 

A.  Yes. 

Q.  And  what  is  a  threat  analyst? 

A.  An  analyst  whose  field  of  study  involves  emerging  threats 
and  existing  threats  whether  they  are  computerized,  as  in  my  case,  or 
more  tangible. 

Q.  What  is  a  Gray  Hat  Hacker? 

A.  A  Gray  Hat  Hacker  is  colloquially  someone  who  performs 
network  analysis  with  permission,  but  not  for  malicious  purposes. 

Q.  You  also  were  aware  that  PFC  Manning  knew  that  you  had 
donated  to  WikiLeaks? 

A.  I  recall  that  he  referenced  that  he  was  aware  of  the  recent 
leak  of  my  film  and  that  I  had  mentioned  WikiLeaks  in  connection  with 
that,  but  I  don't  know  whether  he  knew  I  donated. 

Q.  Essentially  that  was  kind  of  why  PFC  Manning  was  reaching 
out  to  you? 

A.  That  was  one  reason,  yes. 

Q.  Now  I  want  to  ask  you  some  specific  questions  about  your 
conversation  with  PFC  Manning,  okay? 

A.  By  all  means. 
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1  Q.  Your  conversation  began  with  PFC  Manning,  of  course, 

2  reaching  out  to  you  to  make  contact.  Is  that  right? 

3  A.  Yes. 

4  Q.  And  PFC  Manning  told  you  he  was  an  intelligence  analyst? 

5  M J :  Again,  what  is  the  basis  for  this?  I've  got  a  government 

6  objection  and  it's  going  to  be  hearsay,  right? 

7  TC [MAJ  FEIN]:  Yes,  Your  Honor. 

8  CDC [MR .  COOMBS]:  In  this  instance.  Your  Honor,  and  probably  for 

9  the  remainder  of  my  questions  the  response  will  be  M.R.E.  803(3) (3), 

10  existing  state  of  mind. 

11  MJ:  That  exception  allows  current  state  of  mind,  not  things 

12  done  in  the  past.  Go  ahead  and  proceed. 

13  CDC [MR .  COOMBS]:  Your  Honor,  actually  803(3)  (3)  allows  the 

14  declarant,  in  this  case,  an  individual  to  testify  about  a  declarant 

15  statement  of  the  then  existing  state  of  mind. 

16  MJ:  Then  existing  state  of  mind.  That's  right,  nothing  before 

17  then. 

18  CDC [MR.  COOMBS]:  Right.  So  that's  what  I'm  going  after. 

19  MJ:  Government,  what's  your  position? 

20  TC [MAJ  FEIN]:  Can  I  have  a  moment.  Your  Honor? 

21  MJ:  Yes. 
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1  TC [MAJ  FEIN]:  As  long  as  it's  tailored  to  state  of  mind,  ma'am, 

2  but  the  defense's  answer  was  for  the  entire  line  of  questioning.  If 

3  he  veers  from  that,  we'll  object  again. 

4  MJ:  All  right.  Go  ahead. 

5  CDC [MR .  COOMBS]:  Thank  you.  Your  Honor. 

6  MJ:  Overruled. 

7  Questions  continued  by  the  civilian  defense  counsel  [Mr.  COOMBS]: 

8  Q.  He  told  you  he  was  an  intelligence  analyst? 

9  A.  Yes,  35  Foxtrot,  I  believe. 

10  Q.  He  said  to  you,  that  he  thought  he  would  reach  out  to 

11  somebody  like  you  who  would  possibly  understand  him? 

12  A.  Yes. 

13  Q.  During  this  initial  chat  conversation  he  told  you  about  his 

14  life  and  his  upbringing? 

15  A.  In  some  amount  of  detail,  yes. 

16  Q.  He  told  you  that  he  was  being  chaptered  due  to  a  gender 

17  identity  issue? 

18  A.  Yes. 

19  Q.  He  also  told  you  that  he  had  been  questioning  his  gender 

20  for  years,  but  started  to  come  to  terms  with  that  with  his  gender 

21  during  the  deployment? 

22  A.  Yes. 

23  Q.  He  told  you  he  believed  he  had  made  a  huge  mess? 
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1  A. 

Yes,  he  did. 

2  Q. 

And  he  confessed  that  he  was  emotionally  fractured? 

3  A. 

Yes . 

4  Q. 

He  said  he  was  talking  to  you  as  somebody  that  needed  moral 

5  and  emotional  support? 


6  A. 

Yes . 

7  Q. 

At  this  point  he  said  he  was  trying  not  to  end  up  killing 

8  himself? 


9  A. 

That  is  also  correct. 

10  Q. 

He  told  you  that  he  was  feeling  desperate  and  isolated? 

11  A. 

Yes. 

12  Q. 

He  described  himself  as  a  broken  sole? 

13  A. 

Yes,  he  did. 

14  Q. 

He  said  his  life  was  falling  apart  and  he  didn't  have 

15  anyone  to  talk  to? 


16  A. 

Yes,  he  did. 

17  Q. 

And  he  said  he  was  honestly  scared? 

18  A. 

He  also  said  that. 

19  Q. 

He  told  you  that  he  had  no  one  he  could  trust? 

20  A. 

Correct . 

21  Q. 

And  he  told  you  he  needed  a  lot  of  help? 

22  A. 

Yes,  he  did. 
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Q.  He  even  apologized  to  you  on  several  occasions  for  pouring 
out  his  heart  to  you  since  you  were  total  strangers? 

A.  Correct. 

Q.  Now  at  one  point  he  asked  you  if  you  had  access  to 
classified  networks  and  saw  incredible  things,  awful  things,  things 
that  belonged  to  the  public  domain,  not  on  some  servers  in  a  dark 
room  in  Washington,  D.C.  What  would  you  do?  Do  you  recall  him 
asking  you  that  guestion? 

A.  Yes,  I  do. 

Q.  He  told  you  he  thought  that  the  information  that  he  had 
would  have  impact  on  entire  world? 

A.  That  is  also  correct. 

Q.  He  said  the  information  would  disclose  casualty  figures  in 

Irag? 

A.  Yes. 

Q.  And  he  believed  the  State  Department  Cables  explained  in 
detail  how  the  first  world  countries  exploited  the  third  world 
countries? 

A.  He  made  that  representation,  yes. 

Q.  He  told  you  that  the  cables  detailed  almost  criminal, 
political  back  dealings? 

A.  Yes. 
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Q.  He  believed  that  everywhere  there  was  a  U.S.  post  there  was 
a  diplomatic  scandal? 

A.  That  he  did. 

Q.  He  told  you  that  he  believed  that  it  was  important  that  the 
information  got  out? 

A.  Correct. 

Q.  He  thought  that  if  the  information  got  out,  it  might 
actually  change  something? 

A.  Yes. 

Q.  He  told  you  he  did  not  believe  in  good  guys  versus  bad  guys 
anymore? 

A.  Yes. 

Q.  He  only  believed  in  a  plethora  of  states  acting  in  self- 
interest? 

A.  Correct. 

Q.  And  he  told  you  he  thought  he  was  maybe  too  idealistic? 

A.  Correct. 

Q.  He  told  you  that  he  was  always  a  type  of  person  that  tried 
to  investigate  to  find  out  the  truth? 

A.  Something  I  could  appreciate,  yes. 

Q.  And  based  upon  what  he  saw,  he  told  you  he  could  not  let 
information  just  stay  inside? 

A.  Yes. 
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1  Q.  He  said  he  could  not  separate  himself  from  others? 

2  A.  Correct. 

3  Q.  He  felt  connected  to  everybody? 

4  A.  Yes. 

5  Q.  He  even  told  you  he  felt  like  we  were  all  distant  family? 

6  A.  Indeed. 

7  Q.  And  he  said  he  cared? 

8  A.  Yes. 

9  Q.  He  told  you  that  he  thought  he  would  keep  track  —  in  his 

10  job  he  would  keep  track  of  people  that  his  job  impacted? 

11  A.  Correct. 

12  Q.  And  he  wanted  to  make  sure  that  everybody  was  okay? 

13  A.  Yes. 

14  Q.  He  told  you  that  the  way  he  separated  himself  from  other 

15  analysts  was  because  he  cared  about  people? 

16  A.  He  said  that,  yes. 

17  Q.  PFC  Manning  told  you  he  followed  humanist  values? 

18  A.  Yes,  he  did. 

19  Q.  He  said  he  had  custom  dogs  tags  that  actually  "humanist"  on 

20  it? 

21  A.  Yes. 

22  Q.  Do  you  know  what  it  means  to  be  a  humanist? 
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1  A.  From  my  understanding,  placing  the  values  and  the 

2  importance  of  human  life  and  human  beings  as  a  structure  of  morality. 

3  Q.  PFC  Manning  told  you  that  at  the  time  he  was  feeling  that 

4  we're  all  human  and  we're  killing  ourselves  and  no  one  seemed  to  see 

5  that  or  care? 

6  A.  Yes. 

7  Q.  He  told  you  that  he  was  bothered  that  nobody  seemed  to 

8  care? 
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A.  Yes,  he  did. 

Q.  He  said  he  thought  apathy  was  far  worse  than  active 
participation? 

A.  Yes. 

Q.  He  told  you  that  he  preferred  the  painful  truth  over  any 
blissful  fantasy? 

A.  Yes,  he  did. 

Q.  He  also  told  you  that  he  was  maybe  too  traumatized  to 
really  care  about  the  consequences  to  him? 

A.  Yes. 

Q.  He  told  you  that  he  wasn't  brave.  He  was  weak? 

A.  Yes. 

Q.  He  said  he  was  not  so  much  scared  of  getting  caught  and 
facing  consequences  as  he  was  of  being  misunderstood? 

A.  Yes. 
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Q.  At  one  point  you  asked  him  what  his  end  game  was,  correct? 

A.  Yes,  I  did. 

Q.  And  he  told  you,  hopefully  worldwide  discussions,  debates 
and  reforms? 

A.  Yes,  he  did. 

Q.  He  told  you  that  the  reaction  to  the  Apache  video  gave  him 
immense  hope? 

A.  Yes. 

Q.  And  he  said  he  wanted  people  to  see  the  truth? 

A.  Correct. 

Q.  He  said  without  information  you  can't  make  an  informed 
decision  as  a  public? 

A.  Yes,  he  did. 

Q.  And  he  told  you  that  at  the  time  he  was  hoping  that  people 
would  actually  change  if  they  saw  the  information? 

A.  Correct. 

Q.  He  also  told  you  that  he  recognized  that  he  may  be  just 
young,  naive  and  stupid? 

A.  Yes. 

Q.  And  at  one  point  you  asked  him  why  he  didn't  just  sell  the 
information  to  Russia  or  China? 

A.  Correct. 
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Q.  And  he  told  you  that  the  information  belonged  in  the  public 
domain? 

A.  Yes,  he  did. 

Q.  He  believed  that  information  was  in  the  public  domain  and 
should  be  for  the  public  good? 

A.  Yes. 

Q.  You  asked  him  how  long  he  had  been  helping  out  WikiLeaks  at 
one  point? 

A.  Yes,  I  did. 

Q.  He  told  you  that  he  essentially  had  been  - 

MJ:  All  right.  Sustained.  Hearsay. 

CDC [MR .  COOMBS]:  Very  well.  Your  Honor. 

Questions  continued  by  the  civilian  defense  counsel  [Mr.  COOMBS]: 

Q.  At  one  point  he  told  you  that  his  belief  or  his  feelings 
were  that  he  wanted  to  eventually  go  into  politics? 

A.  Yes. 

Q.  And  at  the  time  he  was  thinking  that  humanity  could 
accomplish  a  lot,  if  smart  people  with  ideas  cooperated  with  each 
other? 

A.  Correct. 

Q.  At  any  time  did  he  say  he  had  no  loyalty  to  America? 

A.  Not  in  those  words,  no. 
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Q.  At  any  time  did  he  say  the  American  flag  didn't  mean 
anything  to  him? 

A.  No. 

Q.  At  any  time  did  he  say  he  wanted  to  help  the  enemy? 

A.  Not  in  those  words,  no. 

CDC [MR .  COOMBS]:  Thank  you,  Mr.  Lamo. 

MJ:  Redirect? 

TC [MAJ  FEIN]:  Yes,  Your  Honor. 

REDIRECT  EXAMINATION 

Questions  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  Did  PFC  Manning  in  his  chat  logs  admit  to  knowing  Julian 
Assange? 

A.  Yes,  he  did. 

Q.  Did  PFC  Manning  admit  to  compromising  classified 
information  at  the  thousands  of  documents  level? 

A.  Yes,  he  did. 

Q.  Also,  Mr.  Lamo,  when  did  PFC  Manning  start  talking  to  you; 
what  day  was  that? 

A.  On  or  about  May  20th,  2010. 

Q.  That's  the  end  of  May  2010? 

A.  Yes. 

TC [MAJ  FEIN]:  Thank  you,  Mr.  Lamo.  No  further  questions.  Your 
Honor . 
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CDC [MR .  COOMBS]:  No  cross.  Your  Honor. 

MJ:  Temporary  or  permanent  excusal. 

TC [MAJ  FEIN]:  Your  Honor,  may  we  have  a  brief  in  place  recess? 
MJ:  Why  don't  we  just  not  recess?  Go  ahead  and  confer. 

[There  was  a  pause  while  the  trial  counsel  and  defense  counsel 
conferred. ] 

TC [MAJ  FEIN]:  Permanent,  ma'am. 

CDC [MR.  COOMBS]:  Ma'am,  he  was  on  the  defense's  witness  list 

for  merits,  but  we  do  not  object  to  a  permanent  excusal. 

[The  witness  was  permanently  excused  and  withdrew  from  the 
courtroom. ] 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  has  multiple 
stipulations  at  this  point  to  read. 

MJ:  Proceed. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

CDC [MR.  COOMBS]:  Your  Honor,  if  we  could  actually  just  take  a 

brief  10-minute  comfort  break. 

MJ:  All  right.  Court  is  in  recess  until  11:15.  Let  me  see 

just  one  member  of  both  sides  just  briefly  in  my  chambers. 

Court's  in  recess. 

[The  court-martial  recessed  at  1109,  4  June  2013.] 

[The  court-martial  was  called  to  order  at  1123,  4  June  2013.] 
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MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  who  were  present  when  the  Court  last  recessed  are  again 
present  in  court  and  there  is  an  additional  party. 

TC [MAJ  FEIN]:  There  is.  Your  Honor.  Captain  Whyte  is  present. 

MJ:  Is  the  government  ready  to  proceed. 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  offers  on  the 
record  three  stipulations  of  expected  testimony. 

First,  Your  Honor,  Special  Agent  Charles  Clapper  dated  3 
June  2013,  PE  27. 

It  is  hereby  agreed  by  the  Accused,  Defense  Counsel,  and 
Trial  Counsel,  that  if  Special  Agent  Charles  Clapper  were  present  to 
testify  during  the  merits  and  pre-sentencing  phases  of  this  court- 
martial,  he  would  testify  substantially  as  follows: 

I  am  a  Special  Agent  for  the  U.S.  Army  Criminal 
Investigation  Division  (CID) .  Specifically,  I  work  for  the  CID, 
Computer  Crimes  Investigation  Unit  (CCIU) .  My  current  job  title  is 
Special  Agent  in  Charge  (SAC)  of  the  Arizona  Branch  Office  located  at 
Fort  Huachuca,  Arizona.  As  the  SAC,  I  run  a  two-man  office  that 
handles  exclusively  computer  crimes.  My  job  also  entails  serving  as 
CID's  liaison  officer  for  NETCOM.  Additionally,  I  am  the  liaison 
officer  to  the  Regional  Computer  Emergency  Response  Team  (RCERT- 
CONUS)  and  to  the  Theater  Network  Operations  and  Security  Center 
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(TNOSC) .  I  have  served  in  Arizona  as  an  Special  Agent  for  5  years 
and  I  have  been  the  SAC  for  3  of  the  5  years. 

From  1986  to  1999,  I  was  an  enlisted  Military  Police 
officer  (MP) .  I  served  as  an  Evidence  Custodian  for  the  Investigation 
Section  at  Fort  Lewis,  Washington  from  1993  to  1994.  After  becoming 
a  CID  agent  in  1999,  from  1999  to  2002,  I  served  as  the  Computer 
Crimes  Coordinator  for  the  5th  MP  Battalion  in  Kaiserslautern, 
Germany.  I  was  also  the  Evidence  Custodian  for  the  Kaiserslautern 
CID  Office  from  2001  to  2002.  I  served  as  the  Detachment  Sergeant 
and  as  an  Evidence  Custodian  from  2004  to  2006  at  CCIU  on  Fort 
Belvoir,  Virginia.  In  2007,  I  was  an  INSCOM  contractor  performing 
forensics  for  the  Army's  Computer  Emergency  Response  Team  (Army-CERT) 
in  the  Forensics  and  Malware  Analysis  department.  I  became  a 
civilian  Special  Agent  in  Arizona  in  2008,  and  currently  serve  in 
this  capacity. 

I  received  a  Bachelor  Degree  in  Liberal  Arts  from  Regents 
College  located  in  New  York.  I  have  had  extensive  training  in 
evidence  collection  and  handling.  This  includes  having  attended  the 
17-week  Apprentice  Special  Agents  Course.  I  have  also  attended  the 
Advanced  Crime  Scene  Investigation  class  at  Fort  Leonard  Wood  and  the 
SALT  Special  Agent  Course  at  the  Army  Crime  Lab  located  at  Fort 
Gillem,  Georgia. 
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In  terms  of  computer  and  forensic  training,  I  have  taken 
numerous  courses  at  the  Defense  Cyber  Investigative  Training  Academy 
in  Linthicum,  Maryland.  I  took  these  courses  between  the  years  2000 
and  2008.  They  covered  a  full  range  of  computer  forensics  and 
digital  media  collection  issues.  Between  2003  and  2006,  I  attended 
two  courses  at  Guidance  Software  in  Reston,  Virginia.  This  company 
manufactures  the  forensic  imaging  software  EnCase.  In  2012,  I 
attended  the  Federal  Law  Enforcement  Training  Center  Computer  Network 
Intrusion  Training  program  in  Glynco,  Georgia.  These  courses  all 
discussed  the  collection  and  handling  of  digital  evidence. 

I  have  a  Department  of  Defense  Cyber  Crime  Investigation 
Certificate  from  the  Department  of  Defense  Cyber  Crime  Center,  which 
is  the  highest  certification  that  one  can  receive  in  the  field.  The 
certification  must  be  renewed  every  2  years.  I  received  my  first 
certification  in  2006,  and  last  renewed  it  in  October  of  2012.  In 
addition  to  my  training  and  certifications,  I  have  worked  more  than 
100  cases  in  my  current  duty  position  and  somewhere  between  100  to 
200  cases  in  my  previous  capacities. 

I  follow  several  general  procedures  when  handling  evidence. 
I  review  the  custody  document  and  always  ensure  the  description  of 
the  evidence  matches  the  evidence  attached.  I  check,  for  example, 
that  recorded  serial  numbers,  markings  for  identification,  and 
condition  description  match  the  associated  evidence.  I  ensure  that 


7626 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


c 


9 


the  appropriate  information,  such  as  date  and  time,  are  properly  and 
accurately  recorded.  Lastly,  I  maintain  secure  custody  of  the 
evidence  prior  to  transferring  it  to  another  individual. 

In  this  particular  investigation,  I  worked  with  SA  Antonio 
Edwards  and  assisted  with  witness  interviews  and  the  handling  of 
evidence.  On  12  June  2010,  I  received  evidence  related  to  this 
investigation  from  SA  Edwards.  I  also  received  two  Consent  to  Search 
forms  (CID  Forms  87-R-E) ,  signed  by  Mr.  Adrian  Lamo  on  12  June  2010, 
which  gave  signed  consent  to  law  enforcement  personnel  to  search  his 
electronic  devices  for  "all  information  in  any  form,  pertaining  to 
communications  which  may  be  in  the  form  of  emails,  instant  messaging 
chats,  documents,  data,  computer  code,  log  files,  drawings, 
photographs,  or  any  other  data;  in  encrypted,  plain  text,  or  any 
other  format;  relating  to  Private  First  Class  Bradley  E.  Manning 
and/or  the  disclosure  of  classified  information  or  information  which 
is  the  property  of  the  U.S.  Government." 

The  first  piece  of  evidence  collected  and  further  handled 
was  a  Lenovo  Laptop  computer  with  a  Fujitsu  computer  hard  drive 
serial  number:  K404T812MF4D,  recorded  as  Item  1  on  DA  Form  4137, 
marked  as  document  number  DN  76-10,  and  known  as  "Lamo  Ubuntu  Hard 
Drive".  It  was  collected  from  Mr.  Adrian  Lamo  in  Sacramento, 
California  on  12  June  2010.  The  second  piece  of  evidence  collected 
and  further  handled  was  an  HP  Mini  Brand  computer,  computer  serial 


7627 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


c 


o 


number  CN90513VT,  with  a  Seagate  computer  hard  drive,  serial  number 
5RE2C1QK,  recorded  as  Item  1  on  DA  Form  4137,  marked  as  document 
number  DN  77-10,  and  known  as  "Lamo  HP  Hard  Drive".  It  was  collected 
from  Mr.  Adrian  Lamo  in  Carmichael,  California  on  12  June  2010. 

I  imaged  both  pieces  of  evidence  using  standard  forensic 
imaging  software,  which  does  not  alter  the  original  evidence  in  any 
way.  A  forensic  image  is  a  bit-for-bit  or  exact  copy  of  the  original 
information  on  the  hard  drive.  Using  the  DA  Form  4137,  I  properly 
released  the  original  evidence  back  to  Special  Agent  Edwards  on  14 
June  2010.  While  in  possession  of  these  items,  I  maintained  control 
over  them.  I  returned  the  items  in  the  same  condition  that  I 
received  them  and  have  no  reason  to  believe  that  the  evidence  was 
damaged  or  contaminated  in  any  way.  After  releasing  the  evidence  to 
Special  Agent  Edwards,  I  had  no  further  interaction  with  this 
evidence. 

Ma'am,  stipulation  of  expected  testimony,  Mr.  Garon  Young, 
dated  3  June  2013,  PE  28. 

It  is  hereby  agreed  by  the  Accused,  Defense  Counsel,  and 
Trial  Counsel,  that  if  Mr.  Garon  Young  were  present  to  testify  during 
the  merits  and  presentencing  phases  of  this  court-martial,  he  would 
testify  substantially  as  follows: 

I  am  currently  the  Criminal  Intelligence  Program  Manager 
for  the  U.S.  Army  Computer  Crime  Investigative  Unit  (CCIU)  of  the 
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Criminal  Investigative  Division  (CID) .  I  have  been  with  CCIU  for  10 
years.  This  position  primarily  entails  reviewing  cases  for 
intelligence  data  and  entering  them  into  our  database.  Additionally, 
I  review  reports,  serve  as  the  security  manager,  and  act  as  alternate 
evidence  custodian.  I  have  held  this  position  for  10  years. 

I  have  an  Associate's  degree  from  Central  Texas  College  and 
began  my  law  enforcement  career  in  1980  as  a  Military  Policeman.  In 
1987  I  became  a  Military  Police  Investigator.  From  1989  to  1992,  I 
was  the  Chief  of  Investigations  in  Wuerzburg,  Germany.  During  this 
time,  1989  to  1991,  I  was  also  the  evidence  custodian.  I  joined  CID 
in  1993,  and  from  1994  to  1995,  was  the  alternate  evidence  custodian 
while  stationed  in  Korea. 

From  1995  to  1998,  I  was  the  detachment  sergeant  at  Fort 
Leonard  Wood.  In  this  capacity,  I  was  the  senior  enlisted  advisor 
and  primary  evidence  custodian.  From  1998  until  I  retired  in  2000,  I 
worked  at  CID  Headquarters  on  Fort  Belvoir.  After  3  years  of  working 
for  the  Florida  Department  of  Revenue  in  2003,  I  returned  to  criminal 
investigations  by  joining  CCIU.  I  have  worked  in  my  current  position 
since  then  serving  from  2003  to  2006,  as  the  alternate  and 
occasionally  primary  evidence  custodian  at  various  times.  Throughout 
my  years  in  law  enforcement,  I  have  worked  more  than  800  cases. 

In  1996,  I  took  the  Medical  Legal  Death  Investigations 
Training  by  the  Armed  Forces  Institute  of  Pathology  held  at  Fort 
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Lewis.  In  2005,  I  attended  the  Evidence  Management  Course  at  the 
United  States  Army  Crime  Lab  in  Fort  Gillem,  GA.  And  in  2007,  I 
returned  to  Fort  Gillem  for  the  Army  Crime  Lab's  Special  Agent 
laboratory  Training.  These  courses  do  cover  physical  and  digital 
evidence  collection  and  handling. 

I  follow  several  general  procedures  when  handling  evidence 
as  evidence  custodian.  The  first  time  I  receive  a  piece  of  evidence 
I  check  the  accompanying  DA  Form  4137  evidence  custody  document  to 
make  sure  the  evidence  matches  the  description  and  that  the  marked 
for  identification  number  on  the  evidence  matches  what  is  recorded  on 
the  form.  I  also  check  to  make  sure  the  form  has  been  appropriately 
filled  out.  When  I  sign  the  evidence  into  the  evidence  room,  I  sign 
in  the  "received"  column.  I  then  log  it  into  the  evidence  book  and 
the  database  before  placing  it  in  the  evidence  room.  When  someone 
asks  to  receive  a  stored  piece  of  evidence,  I  pull  the  voucher  number 
and  locate  the  evidence  in  its  appropriate  location.  I  check  to  make 
sure  the  evidence  I  am  handing  over  matches  the  description  on  the 
form  and  then  I  release  it  to  the  Special  Agent  or  Forensic  Examiner 
who  has  requested  it.  I  sign  that  I  have  released  it  and  the 
individual  receiving  it  signs  that  she  has  received  it.  Each  time  I 
relinquish  or  assume  custody  of  evidence,  I  check  the  description  to 
make  sure  the  evidence  being  transferred  matches  the  forms  used  to 
transfer  it. 
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In  my  capacity  as  evidence  custodian,  I  have  worked  with 
Special  Agent  Kirk  Ellis,  Special  Agent  Antonio  Edwards  and  Ms. 

Tamara  Mairena.  When  Ms.  Mairena  came  on  board  as  the  primary 
evidence  custodian,  I  trained  her.  She  works  as  the  primary  and  I  as 
the  alternate  evidence  custodian.  It  is  normal  for  her  to  sign 
evidence  out  of  the  evidence  room  and  for  me  to  sign  it  back  in  or 
vice  versa. 

I  am  involved  in  the  present  case  because  of  my  role  in 
assisting  the  investigation  team  with  the  secure  storage  of  the 
evidence  they  collect.  I  have  received  evidence  from  both  Special 
Agent  Edwards  and  Special  Agent  Ellis. 

On  15  June  2010,  I  received  evidence  related  to  this 
investigation  from  Special  Agent  Edwards.  I  took  custody  of  a  Lenovo 
Laptop  computer  with  a  Fujitsu  computer  hard  drive,  serial  number: 
K404T812MF4D,  collected  from  Mr.  Adrian  Lamo  while  in  Sacramento,  CA 
on  12  June  2010,  recorded  as  Item  1  on  a  DA  Form  4137  marked  as 
document  number  DN  76-10,  and  known  as:  "Lamo  Ubuntu  Hard  drive".  I 
also  took  custody  of  an  HP  Mini  Brand  computer,  computer  serial 
number  CNU90513VT,  with  a  Seagate  computer  hard  drive,  hard  drive 
serial  number  5RE2C1QK,  collected  from  Mr.  Adrian  Lamo  in  Carmichael, 
California  on  12  June  2010,  recorded  as  item  1  on  a  DA  Form  4137 
marked  as  DN  77-10,  and  known  as  "Lamo  HP  Harddrive" .  Upon  taking 
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possession  of  this  evidence  I  logged  it  in  to  the  evidence  room  using 
the  proper  procedures  I  just  described.  I  never  logged  it  back  out. 

On  15  June  2010,  I  also  received  evidence  related  to  this 
investigation  from  Special  Agent  Ellis.  I  took  custody  of  a  DVD 
Marked  "0028-10-cid221-10117  Department  of  State  Server  Logs, 
199.56.188.73",  seized  from  the  Department  of  State  on  15  June  2010, 
recorded  as.  Item  1  on  a  DA  Form  4137  marked  as  DN  78-10,  and  known 
as  "DoS  Server  Logs".  Upon  taking  possession  of  this  evidence,  I 
logged  it  into  the  evidence  room  using  the  proper  procedures  I 
described  earlier.  I  never  logged  it  back  out. 

Your  Honor,  a  stipulation  of  expected  testimony  from  Ms. 
Tamara  Mairena  data  3  June  2013,  Prosecution  Exhibit  29. 

It  is  hereby  agreed  by  the  Accused,  Defense  Counsel,  and  Trial 
Counsel,  that  if  Ms.  Tamara  Mairena  were  present  to  testify  during 
the  merits  and  pre-sentencing  phases  of  this  court-martial,  she  would 
testify  substantially  as  follows: 

I  am  the  primary  evidence  custodian  at  the  Computer  Crimes 
Investigative  Unit  (CCIU)  of  the  U.S.  Army  Criminal  Investigation 
Command  (CID)  in  Quantico,  Virginia.  I  have  held  this  position  since 
2006.  In  this  position,  I  track  and  catalog  evidence  maintained  by 
our  CCIU  office. 

I  have  been  a  Certified  Evidence  Custodian  since  January  of 
2006.  I  received  this  certification  from  the  U.S.  Army  Criminal 
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Investigation  Laboratory.  Since  January  2010,  I  have  also  been  a 
Department  of  Defense  (DOD)  Cyber  Investigations  Training  Academy 
certified  digital  media  collector. 

I  follow  several  general  procedures  when  handling  evidence 
as  evidence  custodian.  The  first  time  I  receive  a  piece  of  evidence, 
I  check  the  accompanying  DA  Form  4137  evidence  custody  document  to 
make  sure  the  evidence  matches  the  description  and  that  the  marked 
for  identification  number  on  the  evidence  matches  what  is  recorded  on 
the  form.  I  also  check  to  make  sure  the  form  has  been  appropriately 
filled  out.  When  I  sign  the  evidence  into  the  evidence  room,  I  sign 
in  the  "received"  column.  I  then  log  it  into  the  evidence  book  and 
the  database  before  placing  it  in  the  evidence  room.  When  someone 
asks  to  receive  a  stored  piece  of  evidence,  I  pull  the  voucher  number 
and  locate  the  evidence  in  the  appropriate  location.  I  check  to  make 
sure  the  evidence  I  am  handing  over  matches  the  description  on  the 
form  and  then  I  release  it  to  the  Special  Agent  or  Forensic  Examiner 
who  has  requested  it.  I  sign  that  I  have  released  it  and  the 
individual  receiving  it  signs  that  he  or  she  has  received  it.  Each 
time  I  relinguish  or  assume  custody  of  evidence,  I  check  the 
description  to  make  sure  the  evidence  being  transferred  matches  the 
forms  used  to  transfer  it. 

I  first  became  involved  in  the  present  case  because  of  my 
role  in  assisting  the  investigation  team  with  the  secure  storage  of 
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1  evidence  they  collect.  I  signed  several  pieces  of  evidence  from  the 

2  investigating  agents  and  forensic  examiners  into  the  evidence  room 

3  and  would  release  evidence  back  to  them  when  they  needed  it  for  their 

4  investigation  or  examinations.  In  my  role  as  evidence  custodian,  I 

5  have  worked  with  and  received  evidence  from  Special  Agent  Kirk  Ellis, 

6  Special  Agent  Antonio  Edwards,  Special  Agent  David  Shaver,  Special 

7  Agent  Calder  Robertson,  Special  Agent  John  Wilbur,  and  Special  Agent 

8  Mark  Mander.  I  also  know  Mr.  Garon  Young.  He  used  to  be  the  primary 

9  evidence  custodian  and  trained  me  when  I  began  working  for  Army  CCIU. 

10  Mr.  Young  currently  serves  as  the  alternate  evidence 

11  custodian.  As  such,  it  is  normal  for  him  to  sign  something  out  of 

12  the  evidence  room  and  for  me  to  sign  it  back  in  or  vice  versa. 

13  On  18  June  2010,  I  signed  a  Lenovo  laptop  computer  with 

14  Fujitsu  computer  hard  drive,  serial  number:  K404T812MF4D,  collected 

15  from  Mr.  Adrian  Lamo  in  Sacramento,  California  on  12  June  2010, 

16  recorded  as  Item  1  on  a  DA  Form  4137  marked  as  document  number  DN  76- 

17  10,  and  known  as  "Lamo  Ubuntu  Harddrive"  out  of  the  evidence  room  to 

18  Special  Agent  Dave  Shaver  for  forensic  examination.  I  also  signed  out 

19  an  HP  Mini  Brand  computer,  computer  serial  number  CNU90513VT,  with 

20  Seagate  hard  drive  serial  number  5RE2C1QK,  collected  from  Mr.  Adrian 

21  Lamo  in  Carmichael,  California  on  12  June  2010,  recorded  as  Item  1  on 

22  a  DA  Form  4137,  marked  as  DN  77-10,  and  known  as  "Lamo  HP  Harddrive" 

23  to  Special  Agent  Shaver  for  the  same  reason.  He  returned  these  items 


7634 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 


o 


o 


later  that  same  day.  I  received  and  released  this  evidence  according 
to  the  proper  procedures  I  just  described.  I  did  not  alter  this 
evidence  in  any  way. 

On  18  October  2010,  I  received  evidence  related  to  this 
investigation  from  Special  Agent  Wilbur  recorded  as  Item  1  on  a  DA 
Form  4137  marked  as  DN  151-10.  I  took  custody  of  a  CD  marked 
"WikiLeaks  DoS  Firewall  Logs  13  Oct  10"  collected  from  the  Department 
of  State  on  15  October  2010,  and  known  as  "DoS  Firewall  Logs".  Upon 
receiving  this  evidence,  I  properly  logged  it  into  the  evidence  room 
using  the  same  procedures  described  earlier.  On  1  November  2010,  I 
properly  released  it  to  Special  Agent  Shaver  for  examination.  He 
returned  it  later  that  same  day.  I  received  and  released  this 
evidence  according  to  the  proper  procedures  I  described  earlier.  I 
did  not  alter  this  evidence  in  any  way. 

On  3  November  2010,  I  received  nineteen  pieces  of  evidence 
from  Special  Agent  Mander,  collected  from  the  home  of  Ms.  Debra  Van 
Alstyne  in  Potomac,  Maryland,  on  2  November  2010,  recorded  as  Items 
1-19  on  a  DA  Form  4137  marked  as  DN  162-10.  Item  2  on  this  DA  Form 
4137  was  an  SD  memory  card,  serial  number:  BE0915514353G,  known  as 
"SD  Card".  On  10  December  2010,  1  properly  released  the  "SD  Card"  to 
Special  Agent  Shaver  for  examination.  He  returned  it  later  that  same 
day.  I  properly  received  the  evidence  back  in  to  the  evidence  room 
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according  to  the  proper  procedures  I  described  earlier.  I  did  not 
alter  this  evidence  in  any  way. 

Your  Honor,  that's  the  end  of  the  three  stipulations  of 
expected  testimony.  The  United  States  would  move  to  admit  what  has 
been  marked  as  Prosecution  Exhibit  13  and  14  for  Identification  as 
Prosecution  Exhibit  13  and  14  respectively. 

MJ:  Any  objection? 

CDC [MR .  COOMBS]:  No,  ma'am. 

MJ:  May  I  see  them? 

[PEs  13  and  14  for  ID  were  handed  to  the  military  judge.] 

MJ:  All  right.  Prosecution  Exhibits  13  and  14  for 

Identification  are  admitted. 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  requests  the  lunch 
recess  a  little  earlier  and  request  a  2-hour  lunch  recess  in  order 
for  the  parties  to  work  on  administrative  issues. 

CDC [MR .  COOMBS]:  No  objection,  Your  Honor. 

MJ:  All  right.  Do  you  want  to  come  back  then  at  1345? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

CDC [MR.  COOMBS]:  Yes,  ma'am. 

MJ:  All  right.  That  will  be  1:35  in  civilian  parlance. 

TC [MAJ  FEIN]:  I'm  sorry,  ma'am,  35  or  45? 

MJ:  45,  I'm  sorry. 

TC [MAJ  FEIN]:  Yes,  ma'am. 
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MJ:  It  will  be  1345  or  1:45  in  civilian  parlance.  Court  is  in 

recess  until  1:45. 

[The  court-martial  recessed  at  1145,  4  June  2013.] 

[The  court-martial  was  called  to  order  at  1351,  4  June  2013.] 

MJ:  Court  is  called  to  order. 

Let  the  record  reflect  all  parties  present  when  the  Court 
last  recessed  are  again  present  in  court. 

Is  the  government  ready  to  proceed? 

ATC [CPT  MORROW]:  Yes.  We  recall  Special  Agent  David  Shaver. 
SPECIAL  AGENT  DAVID  SHAVER,  civilian,  was  recalled  as  a  witness  for 
the  government,  reminded  of  his  previous  oath  and  testified  as 
follows : 

REDIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [MAJ  FEIN] : 

Q.  Special  Agent  Shaver,  I  want  to  talk  about  your  involvement 
in  the  case.  Can  you  describe  your  initial  involvement  for  the  Court 
in  the  investigation  of  PFC  Manning? 

A.  Yes,  sir.  About  June  2010,  I  was  notified  of  a  possible 
compromise  or  data  spillage  involving  Army  computers  at  Fort  —  FOB 
Hammer,  Iraq. 

Q.  When  you  say  compromise  of  information,  classified 
information/unclassified  information? 

A.  Classified,  sir. 
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Q.  And  at  this  time  you  were  the  Special  Agent  in  Charge  at 
DFRB,  the  Digital  Forensic  and  Research  Branch? 

A.  Yes,  sir;  I  was. 

Q.  Specifically,  what  was  your  role  in  the  investigation? 

A.  To  both  supervise  the  people  doing  the  forensic 
examinations  and  to  conduct  forensic  examinations  in  support  of  this 
case. 

Q.  When  you  say  "forensic  examinations,"  can  you  just  describe 
generally  what  you  were  tasked  to  examine  and  what  others  were  tasked 
to  examine? 

A.  We  were  —  As  a  unit,  we  were  tasked  to  examine  all  the 
computers  involved  in  this,  to  include  the  computer  of  Adrian  Lamo 
and  others. 

Q.  And  media  collected  from  PFC  Manning? 

A.  Yes,  sir. 

Q.  Let's  talk  about  —  you  said  —  mentioned  Mr.  Adrian  Lamo. 
Did  you  examine  the  computers  collected  from  Mr.  Lamo? 

A.  Yes,  sir;  I  did. 

Q.  And  what  were  those  two  computers?  What  were  the 
computers? 

A.  There  were  two  of  them:  a  Windows  computer  and  a  Linux 
computer. 
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q.  If  you  would,  just  discuss  your  process  for  examining 
these.  Did  you  --  Well,  first  just  discuss  your  process. 

A.  Sure.  I  checked  the  evidence  in  the  evidence  room.  I 
created  a  forensic  image,  a  bit  by  bit  image.  I  then  verified  that 
the  hash  matched.  I  returned  —  signed  back  the  evidence  into  the 
evidence  room  and  I  would  conduct  my  examination. 

Q.  So  with  respect  to  Lamo ' s  computers  at  least,  you  actually 
created  the  image  yourself? 

A.  Yes,  sir,  I  did. 

Q.  And  then  you  said  you  moved  into  your  work  computer? 

A.  Yes,  sir,  I  did. 

Q.  Why  do  you  do  that? 

A.  You  work  off  the  image,  not  off  the  original  media.  So  you 
want  to  keep  it  pristine.  You  don't  want  to  damage  it. 

Q.  What  were  you  specifically  looking  for  on  Mr.  Lamo's 
computers? 

A.  We  were  —  the  search  that  was  asked  of  me  to  perform  was 
of  limited  scope.  I  was  supposed  to  search  for  the  chat  name 
"bradass87"  and  the  name  "Bradley  Manning." 

Q.  And  why  "bradass87"? 

A.  Sir,  that  was  reported  to  me  as  the  chat  name  used  by  PFC 
Manning . 
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Q.  And  you  were  only  tasked  to  examine  —  or  you  were  you  only 
—  your  scope  only  extended  to  chat  logs? 

A.  Anything  involving  the  two  names. 

Q.  So  it  could  have  been  —  if  his  name  appeared  somewhere 
else,  your  scope  would  have  covered  that  as  well? 

A.  Yes,  sir. 

Q.  You  said  there  were  two  computers.  One  was  a  Windows 
computer? 

A.  Yes,  sir. 

Q.  Let's  talk  about  that  one  first.  Did  you  locate  a  chat 
program  on  this  computer? 

A.  Yes,  sir;  I  did. 

Q.  And  did  you  find  chat  logs  on  the  computer? 

A.  Yes,  sir;  I  did. 

Q.  What  was  the  —  did  these  chat  logs  include  the  username 
bradass87? 

A.  Yes,  sir;  they  did. 

Q.  Who  were  the  chats  between?  One  side  was  bradass87;  who  was 
the  other  side? 

A.  Mr.  Lamo. 

Q.  And  how  many  different  chat  files  did  you  find  in  the  chat 
program  related  to  bradass87? 

A.  Sir,  there  were  four  files. 
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Q.  And  what  were  the  dates  of  those  files? 

A.  21,  22,  23,  and  24  May  2010. 

Q.  And  after  examining  the  computer,  could  you  tell  why  the 
computer  stored  these  chat  conversations? 

A.  Sure.  As  part  of  the  default  settings,  apparently  all  the 
chats  were  logged. 

Q.  Did  you  find  chat  logs  or  at  least  during  your  examination, 
did  you  see  chat  logs  with  other  people  on  the  computer? 

A.  They  were  present,  yes. 

Q.  And  with  respect  to  the  chat  logs  between  Adrian  Lamo  and 
bradass87,  did  you  find  other  versions  of  the  chat  logs  on  the 
computer? 

A.  Yes,  sir,  I  did.  Within  the  desktop  there  were  variations 
of  it . 

Q.  What  was  the  difference  between  the  version  of  the  chat 
logs  in  the  desktop  versus  the  version  in  the  actual  program? 

A.  The  chat  logs  appeared  to  be  the  original  sources;  they 
appeared  to  be  unmolested.  The  chats  on  the  desktop  were  combined, 
they  were  —  and  formatted  differently. 

Q.  Let's  talk  about  the  Linux  computer.  First,  what  is  the 
Linux? 

A.  Sir,  Linux  is  just  an  operating  system. 
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Q.  How  does  it  distinguish  from  a  Mac  operating  system  or 
Windows  operating  system? 

A.  Sir,  it's  just  a  different  operating  system.  It's  free, 
very  powerful,  easy  to  use. 

Q.  And  on  this  computer,  the  Linux  computer,  did  you  find  chat 
logs  containing  the  user  name  bradass87? 

A.  Yes,  sir;  I  did. 

Q.  And  in  what  form  were  the  chat  logs  on  this  computer? 

A.  It  was  just  a  text  file,  sir. 

Q.  For  the  Court's  knowledge,  what  is  a  text  log? 

A.  Sir,  it's  just  a  text  file,  no  formatting,  just  plain 
words . 

Q.  And  what  was  the  —  this  text  file  called?  Was  the  file 
named  called? 

A.  Yes,  sir,  it  was  named  Zero,  Z-E-R-O. 

Q.  Based  on  your  review  of  this  text  file,  could  you  tell  chat 
application? 

A.  No,  sir. 

Q.  Again,  what  were  the  user  names  of  the  individuals  in  the 
chat  logs  in  the  zero  file? 

A.  Bradass87  and  Mr.  Lamo ' s . 

Q.  And  what  were  the  time  periods  of  the  chat  logs  in  Lamo's? 

A.  It  was  25  May  2010,  and  on. 
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Q.  And  did  you  find  other  versions  of  these  chat  logs  in  other 
places  on  the  computer? 

A.  Yes,  sir;  I  did.  Again,  on  the  desktop  there  were 
different  variations  of  it.  They  were  formatted  differently.  They 
have  different  names.  I  believe  one  was  Brad,  underscore, 
confession.  Things  like  that. 

Q.  In  this  case  on  the  Linux  computer,  which  logs  appeared  to 
be  the  originals? 

A.  The  one  from  zero  file. 

Q.  Why  do  you  say  that? 

A.  Sir,  I  compared  them  against  the  recovered  chat  logs  from 
PFC  Manning's  personal  computer  and  they  matched. 

Q.  We'll  talk  about  that  later.  On  both  computers,  Windows 
and  Linux,  did  the  chats  you  identified  appear  to  be  —  and  this  may 
be  a  stupid  question,  but  appear  between  the  same  individuals? 

A.  Yes,  sir. 

Q.  At  any  time  during  this  investigation  did  you  combine  all 
the  chat  logs  from  these  two  computers  into  one  document? 

A.  Yes,  sir;  I  did. 

Q.  Why  did  you  combine  the  chat  logs? 

A.  I  wanted  to  see  if  they  flowed.  I  wanted  to  see  if  it 
seemed  to  be  a  complete  communication  between  the  two  computers. 
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ATC [CPT  MORROW]:  I'm  retrieving  Prosecution  Exhibit  30  for 
Identification  [retrieving  PE  30  for  ID  from  the  court  reporter] . 

I'm  handing  the  witness  what  has  been  marked  as  Prosecution 
Exhibit  30  for  identification  [handing  PE  30  for  ID  to  the  witness] . 

ADC [CPT  TOOMAN] :  Your  Honor,  the  defense  would  be  willing  to 

stipulate  that  the  chat  logs  from  Lamo' s  computer  and  whatever  was 
pulled  from  PFC  Manning's  computer  are  the  same. 

ATC [CPT  MORROW]:  Well,  I'll  ask  a  few  foundational  questions  and 
I'll  move  on  so  it  will  be  clear. 

MJ:  Go  ahead. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  Do  you  recognize  the  document? 

[There  was  a  pause  while  the  witness  reviewed  PE  30  for  ID.] 

A.  Yes,  sir. 

Q.  And  what  is  it? 

A.  Sir,  it's  the  combined  chat  logs. 

Q.  How  do  you  know? 

A.  Sir,  because  I  combined  them  and  this  appears  to  be  what 


this  is. 

Q.  When  you  combined  the  chat  logs,  did  you  alter  the 
information  in  any  way? 

A.  No,  sir,  I  did  not. 
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Q.  Is  this  an  accurate  representation  of  the  chat  logs  in 
printed  form? 

A.  Appears  to  be. 

Q.  You  say  you  combined  the  chat  logs;  is  that  correct? 

A.  Yes,  sir. 

Q.  These  chat  logs  files  have  dates? 

A.  Yes,  sir. 

Q.  When  you  combined  the  chat  logs  files  you  found,  did  you 
place  the  chats  in  chronological  order? 

A.  Yes,  sir;  I  did. 

Q.  Did  you  review  the  content  of  the  chat  logs  once  they  were 
combined? 


A.  Yes,  sir;  I  did. 

Q.  Did  you  find  any  information  that  confirmed  the  additional 
allegations  of  compromised  classified  information? 

A.  Sir,  yes,  it  appeared  to  be  there. 

ATC [CPT  MORROW]:  At  this  time.  Your  Honor,  the  United  States 
offers  Prosecution  Exhibit  30  into  evidence  as  Prosecution  Exhibit 


30. 

ADC [CPT  TOOMAN] :  No  objection.  Your  Honor. 

MJ:  May  I  see  it  please? 

[PE  30  for  ID  was  handed  to  the  military  judge.] 

MJ:  Prosecution  Exhibit  30  for  Identification  is  admitted. 
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ATC [CPT  MORROW]:  No  further  questions.  Thank  you. 

MJ:  Defense? 

ADC [CPT  TOOMAN] :  None,  Your  Honor. 

MJ:  Is  the  witness  temporary  or  permanently  excused? 

ATC [CPT  MORROW]:  Temporary. 

[The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 
the  courtroom . ] 

ATC [CPT  WHYTE]:  The  United  States  asks  for  a  brief  recess  for 
counsel  to  leave. 

MJ:  So  counsel  can  leave? 

ATC [CPT  WHYTE]:  So  Captain  Morrow  can  excuse  himself. 

MJ:  Well,  can  he  excuse  himself  without  a  recess  and  we  just 

keep  going? 

ATC [CPT  WHYTE]:  Sounds  good,  ma'am. 

[CPT  Morrow  exited  the  courtroom. ] 

ATC [CPT  WHYTE]:  Ma'am,  please  let  the  record  reflect  that 
Captain  Morrow  is  no  longer  present. 

MJ:  The  record  shall  so  reflect. 

ATC [CPT  WHYTE]:  Ma'am,  at  this  point  the  United  States 

offers  one  stipulation  of  expected  testimony  into  the  record. 

MJ:  Proceed. 

ATC [CPT  WHYTE]:  The  stipulation  of  expected  testimony  of  Elisa 
Ivory  dated  10  May  2013. 
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It  is  hereby  agreed  by  the  accused,  defense  counsel,  and 
trial  counsel  that  if  Ms.  Elisa  Ivory  were  present  to  testify  during 
the  merits  and  presentencing  phases  of  this  court-martial,  she  would 
testify  substantially  as  follows: 

Number  1.  I,  Elisa  Ivory,  previously  of  the  surname  Rubin 
and  the  Officer  In  Charge,  OIC,  of  the  S-2  section  at  the  305th 
Military  Intelligence  Battalion,  Fort  Huachuca,  Arizona.  I  have  held 
this  position  since  2009.  As  the  OIC,  I  am  responsible  for  security 
oversight,  including  the  security  measures  necessary  for  the  in  and 
out  processing  of  Advanced  Individual  Training,  AIT,  students  at  the 
United  States  Army  Intelligence  Center  and  School. 

2.  Before  becoming  the  OIC  of  the  S-2  section,  I  was  a 
security  specialist  in  the  S— 2  section  for  nearly  15  years.  I  was  the 
lead  for  the  enlisted  section  of  AIT  students  and  was  responsible  for 
processing,  clearance  paperwork,  tracking  the  status  of  security 
clearances  and  providing  the  security  briefed  to  incoming  and 
outgoing  AIT  students. 

3.  All  AIT  students  were  required  to  have  a  Secret 
security  clearance  to  attend  AIT.  I  was  responsible  for  confirming 
that  the  AIT  students  possess  the  necessary  security  clearance 
through  the  Joint  Personnel  Adjudication  System,  JPAS.  If  any 
student  did  not  possess  a  Secret  security  clearance,  I  would  process 
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the  security  clearance  which  would  include  having  the  student 
complete  a  standard  form  SF  86. 

Some  military  occupational  specialties,  MOS,  required  that 
the  student  possess  a  Top  Secret  security  clearance  in  order  to 
graduate  AIT,  and  I  would  assist  those  students  with  processing  their 
top  secret  security  clearances. 

Private  First  Class  Manning  is  a  35  Fox,  previously  96 
Bravo,  All-Source  Intelligence  Analyst,  an  MOS  that  required  Private 
First  Class  Manning  to  possess  a  top  secret  security  clearance  in 
order  to  graduate  from  AIT. 

Number  4.  PFC  Bradley  Manning  attended  AIT  from  4  April 
2008  until  14  August  2008,  during  which  time  I  was  a  security 
specialist  in  the  G2  section.  At  0800  on  Monday,  7  April  2008,  I 
gave  all  students,  including  PFC  Manning,  a  security  brief  which 
lasted  approximately  45  minutes.  I  briefed  the  class,  including  PFC 
Manning,  on  operational  security,  OPSEC,  and  information  system 
security,  INFOSEC.  Specifically,  I  briefed  that  OPSEC  is  the  process 
of  denying  adversaries  information  about  friendly  capabilities  and 
intentions  by  identifying,  controlling  and  protecting  indicators 
associated  with  the  planning  and  conducting  of  military  operations 
and  other  activities.  Specifically,  I  briefed  that  INFOSEC  is  a 
system  of  policies,  procedures  and  requirements  established  under  the 
authority  of  Executive  Order  13526  to  protect  information  that,  if 
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subjected  to  unauthorized  disclosure,  could  reasonably  be  expected  to 
cause  damage  to  the  National  Security. 

I  briefed  the  class,  including  PFC  Manning,  about  the 
dangers  to  National  Security  of  allowing  U.S.  Army  and  government 
classified  information  on  the  internet.  I  explained  to  the  class, 
including  PFC  Manning,  that  putting  information  on  the  internet  not 
only  exposes  information  relating  to  our  National  Security  but  also 
puts  each  Soldier  at  risk  of  blackmail  by  our  adversaries  given  his 
position  of  trust  to  safeguard  classified  information. 

During  my  brief  I  discussed  previous  cases  of  treason  to 
include  John  Walker  Lindh  and  Aldrich  Hazen  Ames  to  teach  PFC  Manning 
and  the  rest  of  the  class  the  consequences  of  violating  this  position 
of  trust  and  betraying  his  country. 

Number  5.  At  the  conclusion  of  my  security  brief,  I 
explained  to  the  class  and  PFC  Manning  the  purpose  and  contents  of 
the  standard  form  SF  312,  Non-Disclosure  Agreement,  NDA.  I  then 
asked  the  class  and  PFC  Manning  if  they  wanted  to  voluntarily  sign 
the  NDA.  PFC  Manning  volunteered  to  sign  the  NDA.  I  then  instructed 
PFC  Manning  and  those  others  who  signed  the  NDA  to  stand  up  and  raise 
their  right  hand  and  state  that  they  accepted  the  responsibilities 
contained  within  the  NDA  and  voluntarily  agreed  to  be  bound  by  the 
terms  within  the  NDA.  Afterwards,  PFC  Manning  completed  and 
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voluntarily  signed  the  NDA  for  which  I  co-signed  as  a  witness  to  PFC 
Manning ' s  signature . 

Number  6.  The  NDA  with  Bates  Numbers  00022912  through 
00022913  is  the  NDA  which  PFC  Manning  executed  on  7  April  2008.  The 
same  document  is  the  NDA,  which  I  then  witnessed  PFC  Manning  sign.  I 
recognize  my  signature  on  that  specific  NDA  and  I,  along  with  each 
student  for  which  I  co-signed  as  a  witness,  followed  the  above 
described  procedures  each  time  the  student  executed  an  NDA. 

Let  the  record  reflect  I'm  retrieving  Prosecution  Exhibit 
59  for  Identification  from  the  court  reporter  [retrieving  PE  59  for 
ID  from  the  court  reporter] . 

Ma'am,  the  United  States  offer  Prosecution  Exhibit  Number 
58  for  Identification  into  evidence? 

MJ:  May  I  see  it? 

[PE  59  for  ID  was  handed  to  the  military  judge.] 

MJ:  Any  objection? 

ADC [MAJ  HURLEY]:  No  objection. 

MJ:  All  right.  Prosecution  Exhibit  59  for  Identification  is 

admitted. 

ATC [CPT  WHYTE]:  Ma'am,  the  United  States  calls  Troy  Moul. 
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TROY  MOUL,  Civilian,  was  called  as  a  witness  for  the  government,  was 
sworn  and  testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  You  are  Mr.  Troy  Moul? 

A.  Correct. 

Q.  Mr.  Moul,  what  is  your  current  position? 

A.  I  work  at  Tucson  Embedded  Systems  as  the  red  disk  trainers 
developers/assistance  ISR  SME. 

Q.  ISR.  What  is  that? 

A.  Intelligence  Surveillance  and  Reconnaissance. 

Q.  What  is  SME? 

A.  Subject  Matter  Expert. 

Q.  When  did  you  start  that  position? 

A.  April  1st  of  this  year. 

Q.  What  are  your  responsibilities  in  that  position? 

A.  I  produce  the  training  support  packages,  lesson  plans,  user 
manuals  for  the  red  disk,  program  of  record  and  then  assist  with  any 
ISR  of  any  questions  from  the  software  developers. 

Q.  What  was  your  position  before  joining  Tucson  Embedded 
Systems? 

A.  I  worked  at  General  Dynamics  at  the  35  Fox  10  level  EATC. 
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Q.  Can  you  explain  35  Fox  —  can  you  explain  what  is  that? 

A.  The  35  Fox  10  level  is  the  introduction  schoolhouse  for  the 

all-source  analysts. 

Q.  What  was  your  position  at  the  AIT  school? 

A.  35  Fox  instructor  trainer. 

Q.  How  long  were  you  an  instructor  at  the  Intelligence  Analyst 


Course? 

A.  I  started  there  in  September  of  07'  and  then  left  there  in 
April  of  this  year. 

Q.  What  is  your  military  background? 

A.  Five  years  active  duty  service  in  the  United  States  Marine 


Corp. 

Q.  What  was  your  MOS? 

A.  0231. 

Q.  Is  there  an  Army  equivalent? 

A.  Yes,  the  35  Fox. 

Q.  What  training  did  you  receive  to  become  an  intelligence 
specialist? 

A.  I  received  training  at  the  Navy  Marine  Corps  Intelligence 
Training  Center  in  Dam  Neck,  Virginia. 

Q.  Let's  talk  about  your  time  at  AIT  when  you  were  an 
instructor.  How  do  you  know  PFC  Manning? 

A.  He  was  a  student  of  mine. 
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Q.  When  were  you  PFC  Manning's  instructor  at  AIT? 

A.  It  was  spring,  summer  of  2008. 

Q.  What  was  PFC  Manning's  MOS  at  the  time? 

A.  He  was  trained  to  become  a  35  Fox. 

Q.  What  is  a  35  Fox  again? 

A.  That  is  the  all-source  analyst  for  the  Army. 

Q.  Are  you  familiar  with  what  an  all-source  intelligence 
analyst  does? 

A.  Yes,  I  am. 

Q.  How  so? 

A.  I  trained  them  for  the  6  years  or  so  and  been  working  in 
and  around  the  field  for  the  past  13. 

Q.  You  said  that  was  what  you  were  when  you  were  prior  - 

A.  Correct,  Marine  Corps  equivalent. 

Q.  How  would  you  describe  what  a  35  Fox  does? 

A.  Easiest  way  to  explain  it  is  j ack-of-all-trades,  master  of 
none.  They  take  information  from  all  the  specialized  intelligence 
disciplines  that  are  out  there  and  make  something  understandable  to 
their  commander. 

Q.  Where  was  the  Intelligence  Analyst  Course? 

A.  Fort  Huachuca,  Arizona. 

Q.  How  long  was  the  course  PFC  Manning  attended  at  AIT? 

A.  16  weeks  and  3  days. 
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Q.  Of  those  16  weeks  at  AIT,  how  many  were  spent  in  the 
classroom? 

A.  Roughly  14  of  those. 

Q.  Let's  talk  about  the  classroom  instruction  at  AIT.  How  many 
days  per  week  was  PFC  Manning  in  the  classroom? 

A.  We  were  there  5,  sometimes  6  days  a  week  depending  on  if  we 
had  a  holiday  or  training  event  or  something  that  took  precedence. 

Q.  And  what  were  the  hours  of  operation  at  the  schoolhouse? 

A.  Roughly  8  to  4 . 

Q.  How  old  were  many  of  the  students  at  AIT? 

A.  Between  the  ages  of  18  and  22. 

Q.  How  did  you  instruct  this  material  to  the  younger  audience 
in  your  class? 

A.  Try  to  relate  the  material  as  best  as  possible  through  the 
use  of  popular  culture  of  the  day  and  any  sport  analogies  or  movie 
analogies  that  I  could  think  of. 

Q.  What  guidance  were  you  given  on  what  material  to  instruct 
PFC  Manning  at  AIT? 

A.  Prior  to  the  start  of  the  cycle  we  were  handed  a  lesson 
plan  and  a  program  of  instruction  to  teach. 

Q.  So  this  lesson  plan  —  What  is  a  lesson  plan? 

A.  It  was  the  outline  that  we  were  supposed  to  teach  from. 

Q.  What  is  the  purpose  of  a  lesson  plan? 
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A.  It  was  to  ensure  since  we  had  a  multitude  of  students 
coming  through  that  everybody  got  the  same  base  material  with  a 
little  leeway  for  the  instructor's  experiences  and  knowhow. 

Q.  When  you  got  this  lesson  plan,  how  did  you  implement  it? 

A.  We  were  given  the  material  from  our  training  development 
team  and  we  were  told  to  review  it,  make  sure  we  understood  it  and 
then  find  a  way  to  pass  that  information  on  to  the  students. 

Q.  Are  you  familiar  with  the  lesson  plan  for  the  intelligence 
course  that  PFC  Manning  attended? 

A.  Yes,  I  am. 

Q.  How  was  that  lesson  plan  organized? 

A.  It  always  started  off  with  the  course  number  that  would  be 
taking,  our  version  number  that  we  were  currently  on,  the  date  that 
either  the  lesson  plan  would  be  finalized  or  had  been  finalized,  a 

table  of  contents  as  to  what  we  would  be  covering  and  then  the 

lessons  themselves. 

Q.  How  many  lessons  were  there? 

A.  There's  14  lessons  at  the  time. 

Q.  Are  you  familiar  with  how  a  lesson  plan  becomes  approved? 

A.  Yes,  I  am. 

Q.  Can  you  explain  that  process? 

A.  TRADOC  regulations  would  stipulate  that  a  lesson  plan  after 
being  developed  would  be  implemented  by  at  least  three  classes,  from 


7655 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


© 


start  to  finish,  with  minor  grammatical  or  formatting  changes  to  be 
made.  Once  it  had  gone  through  those  three  iterations,  it  would  pass 
through  another  checks  and  balances,  higher  up  the  chain  and  then 
TRADOC  would  come  back  and  sign  off  on  it. 

Q.  Do  you  remember  if  the  lesson  plan  when  PFC  Manning 
attended  AIT  had  been  approved? 

A.  It  had  not. 

Q.  So  it  was  still  in  the  training  process? 

A.  Correct,  still  the  verification  embedding. 

ATC [CPT  WHYTE]:  Let  the  record  reflect  I'm  retrieving 
Prosecution  Exhibit  Number  54  from  the  court  reporter  [retrieving  PE 
54  for  ID  from  court  reporter] . 

Let  the  record  reflect  I'm  handing  the  witness  what  has 
been  marked  as  Prosecution  Exhibit  54  for  Identification  [handing  PE 
54  for  ID  to  the  witness] . 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Mr.  Moul,  please  look  at  that  document  and  let  me  know  when 
you're  finished. 

[There  was  a  pause  while  the  witness  reviewed  PE  54  for  ID.] 

A.  All  right,  sir. 

Q.  Are  you  familiar  with  this  document? 

A .  I  am . 

Q.  What  is  this  document? 
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A.  This  is  a  copy  of  the  table  of  contents  for  a  lesson  plan. 

Q.  And  what  characteristics  about  this  document  help  you 
identify  it  as  the  table  of  contents? 

A.  Of  course,  the  title  Table  of  Contents,  Intelligence 
Analyst  Course  on  top,  the  course  and  version  number,  the  lessons 
that  were  actually  taught. 

Q.  So  what  would  you  do  with  this  lesson  plan  after  you  gave  a 
block  of  instruction? 

A.  After  a  block  of  instruction,  we  would  review  our  lesson 
plan  to  ensure  we  hit  the  critical  points  during  instruction  and  if 
we  didn't,  then  we  would  make  sure  to  reiterate  those  during  our 
review  phase  prior  to  our  examination. 

Q.  How  many  lessons  are  included  in  Prosecution  Exhibit  54  for 
Identification? 

A.  Fourteen  total. 

Q.  Are  you  familiar  with  those  14  lessons? 

A.  Yes,  I  am. 

Q.  How  so? 

A.  Of  the  14,  13  of  them  were  actually  taught  in  my  classroom. 

ATC [CPT  WHYTE]:  Your  Honor,  at  this  point  we  offer  Prosecution 
Exhibit  54  for  Identification  into  evidence. 

ADC [MAJ  HURLEY]:  Ma'am,  we  would  object  as  hearsay.  I  don’t 
understand  necessarily  why  you  would  need  the  table  of  contents  or 
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why  the  trier  of  fact  would  need  it  to  make  a  determination  in  this 
case.  You've  essentially  heard  all  the  testimony  from  the  witness. 

MJ:  It's  a  relevance  objection? 

ADC [MAJ  HURLEY]:  Yes,  ma'am. 

MJ:  May  I  see  it,  please? 

[PE  54  for  ID  was  handed  to  the  military  judge.] 

MJ:  I'm  going  to  overrule  that. 

Any  other  objections? 

ADC [MAJ  HURLEY]:  No,  ma'am. 

MJ:  Prosecution  Exhibit  54  for  Identification  is  admitted. 

ATC [CPT  WHYTE]:  Let  the  record  reflect  I'm  retrieving  back 
Prosecution  Exhibit  54  for  Identification  [sic]  back  from  the  court 
reporter  and  handing  it  back  to  the  witness  [handing  PE  54  to  the 
witness] . 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Mr.  Moul,  can  you  please  explain  to  the  Court  this  first 
lesson  generally,  what  it  consisted  of? 

A.  Lesson  one  was  a  welcome  to  the  course  and  an  in-processing 
in  the  classroom. 

Q.  What  about  the  second  lesson? 

A.  Lesson  two  was  information  security  and  operational 
security. 
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Q.  So  what  type  of  information  was  taught? 

A.  We  would  go  over  what  is  classified  information,  what  makes 
something  classified  information,  how  does  one  handle  it,  how  does 
one  store  it,  how  does  one  destroy  it.  And  then  in  terms  of  basic 
unclassified  material,  what  are  some  things  that  personally  you 
wouldn't  want  an  enemy  to  get  ahold  of. 

Q.  Can  you  just  briefly  explain  what  the  third  lesson 
consisted  of? 

A.  That  was  the  research  and  briefing  portion  of  the  class. 

Q.  So  just  a  one  line  summary  of  what  that  lesson  included? 

A.  Here's  how  the  Army  would  like  you  to  do  research.  Here's 
some  of  the  places  you  can  go  to  conduct  research  and  then  here's  how 
you  would  present  that  material. 

Q.  Can  you  give  a  one  line  summary  of  the  fourth  lesson  that 
was  taught  to  PFC  Manning? 

A.  Here's  a  map,  both  hard  and  soft  copy,  here  is  military 
symbology  and  how  to  show  that  symbology  on  a  map. 

Q.  What  about  the  fifth  lesson? 

A.  Here's  how  the  Army  likes  to  operate  doctrinally,  how  they 

prefer  to  do  things  and  how  they  interoperate  with  other 
organizations . 

Q.  And  the  sixth  lesson? 
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A.  This  is  IPB  step  one  and  two,  where  are  we  going,  what  kind 
of  an  area  are  we  going  to  be  fighting  in,  and  some  of  the  basic 
information  we  need  to  know  about  the  people,  the  place,  the  terrain, 
the  general  knowhow  of  the  AO. 

Q.  And  so  you  mentioned  two  acronyms,  IPB.  What  is  IPB? 

A.  Stands  for  intelligence  preparation  of  the  battlefield. 

Q.  And  AO? 

A.  Area  of  operations. 

Q.  Can  you  please  explain  to  the  Court  a  brief  one  line 
summary  of  the  seventh  lesson  taught  to  PFC  Manning? 

A.  What  is  the  threat  that  we  have  in  our  AO;  who  are  they  and 
what  do  they  consist  of? 

Q.  What  does  it  mean  to  evaluate  the  threat? 

A.  Get  to  know  everything  you  possibly  can  about  the  threats 
inside  your  AO. 

Q.  What  type  of  information  would  students  learn  about? 

A.  There's  actually  13  different  categories  of  the  threat  and 
some  of  the  big  ones  are  what  are  their  strength  in  numbers;  what 
weapons  systems  do  they  use;  what  kind  of  attacks  do  they  use;  where 
are  they  setup;  how  do  they  like  to  operate;  where  are  they  getting 
materials;  where  are  they  getting  supplies. 

Q.  And  now  just  a  brief  one  line  summary  of  the  eighth  lesson? 
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A.  Now  that  we  know  who  the  threat  is  and  what  they  can  do, 
how  are  they  going  to  actually  conduct  those  operations? 


Q. 

And  the  ninth  lesson? 

A. 

This  is  where  we  start  determining  what  we  don't  know  and 

what  information  is  still  going  to  be  vital  to  our  commander  in  order 


to  meet 

their  mission  intent. 

Q. 

What  is  the  ISR  plan? 

A. 

The  ISR  plan  is  the  base  plan  utilized  by  the  intel  and 

operations  sections  to  send  assets  out  to  collect  more  information 
about  the  AO  so  that  we  can  fill  in  those  gaps  of  knowledge. 


Q. 

Now,  the  10th  lesson,  can  you  give  a  brief  one-line  summary 

of  what 

that  consisted  of? 

A. 

How  to  lethally  or  nonlethally  remove  a  person,  place. 

thing  or  idea  from  our  area  of  operations  so  that  we  can  meet  our 


mission 

and  intent. 

Q. 

And  the  11th  lesson? 

A. 

Basic  intel  analysis,  how  to  take  all  that  information  that 

we  have 

gathered,  all  that  information  we've  collected  and  all  the 

information  we  have  researched  and  produce  something  presentable  and 
brief able  to  the  commander. 

Q.  Can  you  explain  the  simulated  wartime  environment  that  was 
created  during  this  lesson? 
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A.  During  that  time,  the  classes  would  either  split  the  class 
in  half  or  pit  classroom  against  classroom  in  a  red  versus  blue 


scenario. 

Q. 

Who  was  the  blue  cell? 

A. 

Blue  cell  was  friendly  forces,  generally  modeled  after  the 

US  Army, 


Q. 

What  was  their  mission  as  friendly  forces? 

A. 

Their  mission  was  to  go  into  an  area,  a  simulated  area. 

generally 

the  Sierra  Vista  area  and  remove  insurgent  forces  from  that 

location  in  order  to  make  the  area  of  operation  more  suitable  for  the 
government  to  take  control  again. 


Q. 

And  what  about  the  red  cell,  the  other  team? 

A. 

The  red  cell  was  just  the  opposite.  They  were  the  enemy, 

the  adversary,  the  threat  that  was  trying  to  undermine  the  authority 
of  the  local  government  and  the  blue  cell  in  an  attempt  to  remain  in 
control  of  the  AO. 

Q.  During  this  block  of  instruction,  what  training  did  PFC 
Manning  receive  on  the  computer  systems? 


A. 

We  also  covered  the  DCGS-A  suite  at  this  time. 

Q. 

What  is  the  DCGS-A? 

A. 

Stands  for  Distributed  Common  Ground  Station  Army,  and  it 

is  the  network  of  computer  systems  generally  on  the  SIPRNET  that  are 
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utilized  by  the  U.S.  Army  and  other  branches  to  maintain  instant 
connectivity  between  each  other. 

Q.  So  what  type  of  training  did  PFC  Manning  receive  during 
this  period? 

A.  We  went  through  specialized  training  for  the  software  on 
the  program  or  on  the  system,  the  MFWS  system  and  taught  the  Soldiers 
how  to  utilize  those  assets  to  best  present  and  understand  their 
materials . 

Q.  Can  you  explain  to  the  Court,  just  a  brief  one  line  summary 
of  the  12th  lesson? 

A.  Now  that  you've  got  everything  kind  of  gathered,  now  that 
you  have  everything  ready,  these  are  the  different  types  of  products 
that  would  be  produced  and  be  needed  for  command  and  staff  elements 
to  war  game  themselves  and  do  MDMP. 

Q.  MDMP? 

A.  Stands  for  military  decision-making  process. 

Q.  Can  you  explain  to  the  Court  the  13th  lesson? 

A.  The  13th  lesson  is  where  we  would  actually  send  the 

students  out  to  a  site  Maverick  and  conduct  a  simulated  deployed 
environment . 

Q.  And  what  about  the  final  lesson?  Were  you  involved  in  that 
final  14th  lesson? 

A.  I  was  not.  That  was  handled  by  the  company. 
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Q.  So  let's  talk  about  the  second  lesson,  information 
security,  operational  security.  How  long  --  let  the  record  reflect 
I'm  retrieving  Prosecution  Exhibit  from  the  witness  [retrieving  PE  54 
from  the  witness] . 

Q.  So  information  security  operational  security,  how  long  was 
this  period  of  instruction? 

A.  It  was  3  days. 

Q.  Do  you  remember  teaching  PFC  Manning? 

A.  I  do. 

Q.  What  materials  were  provided  to  the  students  during  this 
period  of  instruction? 

A.  Before  showing  up  to  the  course  each  student  was  issued  a 
laptop  and  then  when  they  got  into  the  course  we  would  give  them  a  CD 
containing  soft  copy  of  all  of  our  lessons,  the  PowerPoints.  They 
also  had  soft  copy  of  all  the  doctrine  and  FMs  we  would  be  going 
through  and  for  select  materials  we  would  actually  give  them  hard 
copy  doctrine  and  publications. 

Q.  What  Army  regulations,  do  you  remember,  was  PFC  Manning 
provided  during  this  period? 

A.  Off  the  top  of  my  head  he  was  provided  the  worldwide 
equipment  guides,  both  copies  one  and  two.  He  was  provided  a 
symbology  handout  and  AR  380-5  were  the  main  hard  copy  versions  given 
out . 
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Q.  Did  you  present  in  this  period  of  instruction  to  the  AIT 


2  student? 


3 


A.  I  did. 


4 


Q.  What  was  the  organization  of  this  PowerPoint? 


5 


A.  The  PowerPoint  would  start  off  with  this  is  what  the  block 


6  of  instruction  is  going  to  be.  We  would  then  move  into  basic 

7  administrative  data  for  the  classroom,  what  to  do  in  case  of  fire, 

8  what  to  do  in  case  of  flood  and  that  kind  of  deal.  We  then  go  into 

9  an  agenda  slide  over  what  we  would  be  covering  for  the  block  of 

10  instruction  and  then  go  into  the  lesson  plan  itself. 

11  Q.  Are  there  any  unique  characteristics  about  this  PowerPoint 

12  that  would  help  you  identify  it  as  coming  from  AIT? 

13  A.  Yes,  there  are. 

14  Q.  What  are  those  characteristics? 

15  A.  Some  of  the  base  characteristics  we  had  for  our  slides  is 

16  in  the  upper  left-hand  and  right-hand  corner  we  had  the  MI  crest  and 

17  unit  symbol.  Prior  to  December  of  2008,  the  slides  were  just 

18  horribly  formatted,  text  different  sizes,  different  fonts,  titles 

19  just  jumping  all  around  the  place. 

20  ATC [CPT  WHYTE]:  Let  the  record  reflect  I'm  retrieving 

21  Prosecution  Exhibit  52  for  Identification  [retrieving  PE  52  for  ID] . 

22  Let  the  record  reflect  I'm  handing  the  witness  Prosecution 

23  Exhibit  52  for  Identification  [handing  PE  52  for  ID  to  the  witness] . 
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Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Mr.  Moul,  please  look  at  that  document  and  let  me  know  when 
you're  finished. 

[There  was  a  pause  while  the  witness  reviewed  PE  52  for  ID.] 

Q.  Are  you  familiar  with  this  document? 

A .  I  am . 

Q.  What  is  this  document? 

A.  This  is  a  hard  copy  of  the  PowerPoints  that  we  provide  to 
the  students. 

Q.  What  characteristics  about  this  document  help  you  identify 
it  as  coming  from  AIT? 

A.  Again,  the  big  giveaways  are  the  MI  crest  and  unit  symbol 
up  in  the  upper  left-hand  and  right-hand  corners.  The  MI  symbol  in 
the  center,  the  Ad  Arcana  Tutanda,  and  again  the  basic  formatting 
issues  throughout  the  slide  show. 

Q.  Is  the  organization  of  this  PowerPoint  consistent  with  your 
memory? 

A.  Yes,  it  is. 

ATC [CPT  WHYTE]:  Your  Honor,  at  this  time  we  offer  Prosecution 
Exhibit  52  for  Identification  into  evidence. 

MJ:  Any  objection? 

ADC [MAJ  HURLEY]:  No  objection. 

MJ:  May  I  see  it,  please? 
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1  [PE  52  for  ID  was  handed  to  the  military  judge.] 

2  Prosecution  Exhibit  52  for  Identification  is  admitted. 

3  ATC [CPT  WHYTE]:  Your  Honor,  at  this  point  request  permission  to 

4  publish  the  exhibit  for  the  Court. 

5  MJ:  Proceed. 

6  [PE  52  was  published  to  the  Court.] 

7  Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

8  Q.  So  Mr.  Moul,  according  to  slide  number  - 

9  Your  Honor,  can  we  have  a  moment? 

10  MJ:  Do  you  need  a  recess? 

11  ATC [CPT  WHYTE]:  Yes,  ma'am.  Brief  recess. 

12  MJ:  Ten  minutes. 

13  ATC [CPT  WHYTE]:  Yes,  ma'am. 

14  [The  witness  was  duly  warned,  temporarily  excused  due  to  the  recess 

15  and  withdrew  from  the  courtroom.] 

16  MJ:  Court's  in  recess. 

17  [The  court-martial  recessed  at  1430,  4  June  2013.] 

18  [The  court-martial  was  called  to  order  at  1444,  4  June  2013.] 

19  MJ:  Court  is  called  to  order. 

20  Major  Fein,  would  you  like  to  account  for  the  parties? 

21  TC [MAJ  FEIN]:  Yes,  ma'am.  All  parties  when  the  Court  last 

22  recessed  are  again  present  with  the  addition  of  Captain  Overgaard. 

23  MJ:  Thank  you.  Proceed. 
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ATC [CPT  WHYTE]:  United  States  calls  Mr.  Moul . 

TROY  MOUL,  Civilian,  was  recalled  as  a  witness  for  the  government, 
was  reminded  of  his  previous  oath  and  testified  as  follows : 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Mr.  Moul,  according  to  slide  number  7,  what  training  was 
PFC  Manning  provided  on  classification  designations? 

A.  He  was  trained  in  accordance  with  Army  Regulation  380-5  up 
there  about  the  different  levels  of  classification. 

Q.  And  slides  8  and  9,  what  was  he  taught  about  the 
classification  process? 

A.  Again  coming  from  AR  380-5,  he  was  taught  what  an 
originating  authority  is,  who  that  person  is,  what  they  can  and  can't 
decide,  what  they  can  and  can't  classify  and  then  who  can  and  cannot 
declassify  information. 

Q.  Slide  12  through  16.  What  training  was  PFC  Manning 
provided  on  classification  markings? 

A.  He  was  trained  on  how  to  mark  both  hard  copy  and  soft  copy 
documents,  visible  at  the  top  and  bottom  of  every  page.  Ensuring  the 
classification  is  readily  available,  paragraph  markings,  bullet 
markings  for  slides,  document  protection.  The  BSF  series  of 
documents  for  the  front  and  back  cover  of  a  printed  document  as  well 
as  stickers  that  would  go  on  electronic  media. 
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Q.  Slide  21,  what  training  was  PFC  Manning  provided  on 
declassification? 

A.  Again,  in  according  with  AR  380-5  the  entire  class  was 
informed  that  only  an  originating  authority  could  declassify  material 
and  then  that  there  are  four  different  levels  of  review  that  a 
document  would  fall  under. 

Q.  And  according  to  slide  22,  how  are  students  tested  on  these 
different  classification  levels? 

A.  This  is  an  example  of  one  of  the  student  checks  that  would 
take  place  throughout  the  block  of  instruction.  These  were  really  to 
make  sure  that  the  students  were  actually  following  along  with  us  and 
staying  with  us  and,  more  than  anything  else  since  this  was  a 
PowerPoint  heavy  part  of  the  classroom,  staying  awake  with  us.  These 
questions  would  come  up.  The  student  was  chosen  at  random  to  answer 
the  question,  practical  exercises  were  conducted  later  in  the  course 
and  then  an  examination  was  the  culmination  for  this  block  of 
instruction. 

Q.  According  to  slide  26,  what  training  was  PFC  Manning 
provided  on  what  is  required  for  someone  to  be  given  access  to 
classified  information? 

A.  Again,  according  to  the  AR,  the  verification  that  they  had 
a  security  clearance,  they  had  a  need  to  know  and  that  an  SF  312  had 
been  signed  by  the  individual  requesting  access. 
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Q.  According  to  slide  31,  what  training  was  PFC  Manning 
provided  on  who  is  responsible  for  protecting  classified  information? 

A.  As  the  title  up  there  shows,  it's  every  individual's 
responsibility  that  has  access. 

Q.  And  slide  38,  what  training  was  he  provided  on  how  to  store 
classified  information? 

A.  He  was  trained  in  accordance  with  the  GSA  standards  that 
have  been  approved  through  AR  380-5  for  safes  and  containers  and  the 
transfer  of  the  materials  and  whatnot. 

Q.  And  slide  47  and  48,  what  training  was  he  —  did  he  receive 
on  labeling  media  devices? 

A.  Again,  he  was  informed,  as  well  as  the  rest  of  the  class 
was  informed,  that  anything  that  fell  under  this  list  or  anything 
that  fell  under  electronic  media  had  to  ensure  that  these  stickers 
were  readily  prevalent  on  the  media.  Example,  the  screens  on  the 
court  reporter's  desk  would  have  to  have  the  green  sticker  since  they 
are  unclassified,  readily  visible  on  the  computer  screen. 

Q.  Slide  53  and  54,  what  training  was  he  provided  on  how  to 
transport  classified  information? 

A.  He  was  instructed  about  the  courier  system  as  well  as  how 
to  send  media  through  either  electronic  means,  e-mail  or  in  this  case 
the  registered  mail  with  the  US  postal  office  and  actually  certified 
mail  and  sending  something  in  hard  copy. 
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Q.  Now,  let's  talk  about  operational  security.  According  to 
slide  71  and  72,  what  training  was  PFC  Manning  provided  on  the  type 
of  information  we  withhold  from  our  enemies? 

A.  He  was  trained  that  anything  that  the  enemy  can  use  or 
piece  together  to  use  against  us  will  be  stuff  that  they  want  to 
protect  and  not  let  out. 

Q.  On  slide  number  72,  can  you  please  read  some  of  the 
examples  of  critical  information  we  withhold  from  our  enemies? 

A.  Photos,  installation  maps  with  highlights  of  designated 
points  of  interest,  sleeping  and  working  areas,  commanders' 
facilities,  dining  facility,  our  standard  operating  procedures,  our 
tactics,  techniques  and  procedures,  unit  capabilities  and  intent,  the 
morale  of  our  unit  and  basic  personal  or  familial  information  about 
the  Soldier  themselves. 

Q.  According  to  slide  number  73,  what  training  was  PFC  Manning 
provided  about  the  dangers  of  putting  information  on  the  internet? 

A.  They  were  informed  that,  you  know,  the  web's  open  to 
anybody  hence  the  blue  bar  down  below.  Remember  it's  called  the  World 
Wide  Web  for  a  reason.  Anybody  that  has  access  to  the  internet  can 
see  any  of  the  information  that's  on  the  internet.  And  it's  just 
it  was  really  pertinent  to  make  sure  that  whatever  one  was  releasing 
on  the  internet  was  not  something  that  could  be  used  against  them  or 
against  a  military  organization. 
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Q.  And  what  examples  did  you  provide  PFC  Manning  about  how 
posting  information  on  the  internet  can  be  helpful  to  the  enemy? 

A.  Well,  the  biggest  example  I  would  use  here  to  ensure  that 
the  younger  individuals  coming  to  the  class  or  the  uneducated  in  the 
military  would  understand  is  your  mother's  maiden  name,  your  date  of 
birth  and  Social  Security  number.  While  separate  they  can't  do  a 
whole  lot  of  damage,  but  when  you  take  the  three  of  them  and  put  them 
together,  somebody  else  can  open  a  line  of  credit  in  your  name,  mess 
up  your  credit  score.  They  can  start  doing  bad  things  against  your 
name,  your  personal  reputation.  So  this  is  —  that  was  the  example 
you  see  here.  Think  about  some  of  this  information  like  this,  you 
know,  if  your  mother's  maiden  name  and  Social  Security  got  out  there, 
if  you  say  something  similar  to  the  effect  of,  "My  unit.  Alpha 
Company  whatever,  we're  going  to  board  this  plane  at  this  airport  at 
this  time,"  an  enemy  can  get  ahold  of  that,  use  that  information  and 
plan  an  attack  against  that  airline  or  that  airport  or  the  unit. 

Q.  And  what  training  was  PFC  Manning  provided  about  the 
consequences  of  compromising  classified  information? 

A.  We  ensured  that  the  Soldiers  went  through  the  SF  312,  the 
Non-Disclosure  Agreement,  and  according  to  that  document  disclosing 
classified  information  or  disclosing  - 
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ADC [MAJ  HURLEY]:  Ma'am,  we  would  object  as  to  the  relevance  of 
the  penalties  that  Mr.  Moul  understands  might  flow  from  disclosure  of 
classified  information. 

MJ:  Why? 

ADC [MAJ  HURLEY]:  Ma'am,  I  don't  believe  it's  relevant. 

ATC [CPT  WHYTE]:  Your  Honor,  the  United  States'  position  is  it's 
relevant  to  the  wanton  element  of  Specification  1  of  Charge  II. 

MJ:  He's  going  over  what's  on  the  non-disclosure  form,  right? 

His  testimony  is  about  what  he  told  the  class;  is  that  correct? 

ATC [CPT  WHYTE]:  Yes,  ma'am. 

MJ:  Overruled. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  You  can  continue,  Mr.  Moul. 

A.  Again,  in  the  class  what  we  went  over  with  the  SF  312  was 
the  fact  that  any  knowing  disclosure  of  classified  information  could 
lead  to  10  years  imprisonment  and/or  $10,000  fine. 

Q.  How  were  students  tested  on  this  period  of  instruction 
about  protecting  classified  information? 

A.  The  block  of  instruction  culminated  in  a  1  hour,  30 
question  multiple  choice  examination. 

Q.  What  grade  did  students  have  to  receive  in  order  to  pass 
this  test? 

A.  Eighty  percent  or  better. 
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Q.  Did  everybody  have  to  pass  the  test? 

A.  Yes,  they  did. 

Q.  What  happened  if  someone  failed  it? 

A.  If  they  failed  the  initial  examination,  they  were  counseled 
by  the  green  suitors.  They  received  retraining  from  their 
instructors  and  given  a  secondary  chance  to  pass  a  different  version 
of  the  examination. 

Q.  What  happened  if  someone  failed  it  again? 

A.  If  they  failed  it  again,  at  that  point  the  Soldier,  their 
information  would  be  turned  over  to  the  green  suiters  again.  The 
green  suiters  or  the  military  instructors  at  the  time  would  put 
together  a  recycle  or  relief  packet  and  then  present  it  forward  to 
the  OIC,  the  officer  in  charge,  at  that  time  would  make  a 
determination  as  to  whether  or  not  the  individual  would  be  given  a 
third  chance  with  the  class  they  were  with,  if  they  would  be  recycled 
to  the  next  available  class  to  attend  the  training  again  and  get  a 
chance  at  both  tests,  or  if  they  would  be  relieved  from  the  course 
and  given  the  opportunity  to  do  a  different  MOS . 

Q.  Did  PFC  Manning  have  to  pass  the  test  to  graduate? 

A.  Yes,  he  did. 

Q.  Did  PFC  Manning  graduate? 

A.  He  did. 

Q.  Are  you  familiar  with  the  school's  policy  on  attendance? 
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A .  I  am . 

Q.  Can  you  explain  that  policy? 

A.  According  to  the  student  evaluation  plan,  a  student  can 
miss  no  more  than  seven  and  a  half  consecutive  hours  of  one  block  of 
instruction  or  15  and  a  half  cumulative  hours  within  a  block  of 
instruction . 

ATC [CPT  WHYTE]:  At  this  time  let  the  record  reflect  that 
Prosecution  Exhibit  Number  52  has  been  removed  from  display. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  So  now  let's  just  talk  about  lesson  number  3.  How  did  you 
present  this  block  of  instruction  to  the  AIT  students? 

A.  Like  all  of  the  rest  of  the  blocks  of  instruction,  it  was 
in  PowerPoint  format  and  as  the  slides  would  come  up  we  would  talk 
about  the  slides  to  the  students  or  get  a  discussion  going  as  to  what 
the  material  was  on  there. 

Q.  What  was  the  organization  of  this  PowerPoint? 

A.  Just  like  the  rest  of  the  slides,  it  would  start  off  with 

the  title  slide  as  the  block  of  instruction,  go  through  the 
administrative  data,  go  through  the  agenda,  go  through  the  safety 
data  and  get  into  the  actual  block  of  instruction. 

Q.  Are  there  any  unique  characteristics  about  this  PowerPoint 
that  would  help  you  identify  it  as  coming  from  AIT? 

A.  Yes,  there  are. 
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Q.  What  are  those  characteristics? 

A.  The  same  characteristics  that  would  have  been  on  or  were  on 
the  information  security  slides,  the  crest  in  the  upper  left-hand, 
right-hand  corner,  the  font  colors  used,  the  general  jaggedness  of 
the  format  of  the  slides. 

ATC [CPT  WHYTE]:  Retrieving  Prosecution  Exhibit  51  for 

Identification  [retrieving  PE  52  for  ID  from  the  court  reporter]  and 

handing  Prosecution  Exhibit  51  for  Identification  - 

MJ:  Hold  on  just  a  minute. 

[Pause . ] 

ATC [CPT  WHYTE]:  And  let  the  record  reflect  I'm  handing 

Prosecution  Exhibit  Number  51  for  Identification  to  the  witness 
[handing  PE  51  for  ID  to  the  witness] . 

[Examination  of  the  witness  continued.] 

Q.  Mr.  Moul,  please  look  at  that  document  and  let  me  know  when 
you ' re  finished . 

[There  was  a  pause  while  the  witness  reviewed  PE  51  for  ID.] 

A.  I'm  good,  sir. 

Q.  Are  you  familiar  with  this  document? 

A .  I  am . 

Q.  What  is  this  document? 

A.  This  is  an  excerpt  from  the  third  lesson  that  we  went  over. 
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1 

Q.  What  characteristics  about  this  document  help  you  identify 

2 

it  today? 

3 

A.  Again  the  crest  in  the  upper  left-hand,  right-hand  corner. 

4 

some  of  the  pictures  are  still  prevalent  and  used,  the  lesson  plans 

5 

that  we  were  teaching  up  until  the  time  I  left  and  again  the  general 

6 

formatting  issues  throughout  it. 

7 

ATC [CPT  WHYTE]:  Your  Honor,  at  this  time  we  offer 

8 

Prosecution  Exhibit  51  for  Identification  into  evidence. 

9 

ADC [MAJ  HURLEY]:  No  objection. 

10 

MJ:  May  I  see  it,  please? 

11 

[PE  51  for  ID  was  handed  to  the  military  judge.] 

12 

MJ:  Prosecution  Exhibit  51  for  Identification  is  admitted. 

13 

ATC [CPT  WHYTE]:  Your  Honor,  we  request  permission  to  publish 

14 

this  exhibit  for  the  Court. 

15 

MJ:  Proceed. 

16 

[PE  51  for  ID  was  published  to  the  Court.] 

17 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

18 

Q.  Mr.  Moul,  according  to  slide  216  through  219,  what  training 

19 

did  PFC  Manning  receive  on  the  background  of  terrorist  organizations? 

20 

A.  PFC  Manning  and  the  class  received  some  macro  information 

21 

about  some  prominent  terrorist  organizations,  al-Qaeda  being  one  of 

22 

them.  The  others  being  Ansar  al-Islam,  Ansar-al  Sunna  and  al-Qaeda 

23 

in  Iraq. 
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Q.  How  did  PFC  Manning  use  this  material  later  in  the  course? 

A.  The  material  that  was  provided  here  was  referenced  to, 

again,  in  the  lesson  7,  I  think  it  was,  the  evaluate  the  threat,  the 
IPB  step  portion  of  the  classroom. 

Q.  What  did  students  have  to  do  with  the  information  that  they 
learned  previously  in  R3? 

A.  Again,  some  of  the  macro  information  that  was  presented 
here  was  to  let  them  know  why  the  different  organizations  did  what 
they  did  and  how  they  did  what  they  did.  When  we  got  into  that  IPB 
step  3,  the  evaluate  the  threat,  base  information  about  possible 
threat  groups  in  their  area  of  operations  was  presented  to  them  and 
they  would  have  to  then  draw  conclusions  as  to  which  of  the  groups 
that  may  be  operating  inside  their  AO. 

Q.  So  according  to  the  slide  220  through  223,  what  training 
did  PFC  Manning  receive  on  terrorist  recruiting  efforts? 

A.  They  received  the  base  training,  the  different  types  of 
recruiting  utilized  by  terrorist  organizations,  they  received 
information  about  willful  recruiting  and  unwillful  recruiting  as  well 
as  how  some  organizations,  particularly  in  the  al-Qaeda  in  Irag 
organization  here  would  utilize  events  happening  within  the  country 
to  recruit  followers  from  within  that  area  that  they're  in. 

Q.  Mr.  Moul,  would  you  please  read  slide  223  for  the  record? 
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A.  Over  the  last  10  years  the  number  of  terrorist  sites  has 
jumped  from  less  than  100  to  as  many  as  4,000.  Many  insurgency 
groups  have  many  sites  and  message  boards  to  help  their  network. 

ATC [CPT  WHYTE]:  Thank  you.  Let  the  record  reflect  prosecution 
Exhibit  51  has  been  removed  from  the  display. 

Mr.  Moul,  let's  just  briefly  talk  —  let  the  record  reflect 
I'm  retrieving  from  the  witness  prosecution  Exhibit  Number  51. 
Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  So  Mr.  Moul,  just  lastly  let's  focus  on  the  field  training 
exercise  that  you  spoke  about  earlier. 

A.  Okay. 

Q.  How  long  is  this  field  training  exercise? 

A.  It  was  10  days  in  the  actual  field  exercise  with  3  days  of 
prep  work. 

Q.  Can  you  describe  this  field  exercise? 

A.  It  was,  again,  located  in  the  field  at  site  Maverick  and 
was  a  simulated  deployment  the  students  would  go  through. 

Q.  And  how  were  the  students  broken  up  in  this  field  training 
exercise? 

A.  Each  classroom  was  broken  up  into  an  individual  TOC  there 
at  the  site.  The  TOCs  were  then  divided  into  two  shifts  of  12  hours 
a  piece,  and  then  those  shifts  were  further  broken  down  into  one  of 
four  different  cells  within  the  TOC. 
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Q.  And  what  were  those  cells? 

A.  They  were  the  operation  cells,  targeting  cells,  fusion  cell 
and  ISR  cell. 

Q.  How  often  would  students  rotate  between  these  different 
sections? 

A.  Every  two  to  three  days  or  so  depending  on  how  the  work 
flow  was  going. 

Q.  One  of  the  cells  you  named  was  operation  cell.  What  was 
the  operation  cell? 

A.  The  operation  cell  was  responsible  for  the  current  fight 
that  was  going  on.  They  were  to  ensure  that  everyone  within  the  TOC 
understood  the  messages  that  were  coming  across  and  to  ensure  that 
those  —  the  other  three  cells  actually  got  those  messages. 

Q.  Did  PFC  Manning  work  in  this  group? 

A.  Yes,  he  did. 

Q.  What  was  the  ISR  cell? 

A.  The  ISR  cell  were  the  individuals  responsible  for 
collecting  that  information  that  needed  to  be  known  in  order  to  fill 
in  those  gaps  we  had. 

Q.  Did  PFC  Manning  work  in  this  group? 

A.  Yes,  he  did. 

Q.  What  about  the  targeting  cell?  What  was  that? 
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1  A.  Their  purpose  was  again  to  either  lethally  or  non-lethally 

2  remove  some  kind  of  a  threat  from  the  AO. 

3  Q.  Did  PFC  Manning  work  in  this  group? 

4  A.  Yes. 

5  Q.  And  lastly,  what  about  the  fusion  cell?  What  was  the 

6  fusion  cell? 

7  A.  They  were  the  cell  responsible  for  bringing  together  all  of 

8  the  materials  from  the  other  cells,  fusing  it  into  a  product  that  was 

9  ready  to  be  briefed  as  well  as  looking  at  the  future  fight,  what  the 

10  threat  groups  were  doing,  the  types  of  operations  they  were 

11  conducting  and  what  were  going  to  be  the  most  likely  kind  of  attacks 


12 

that  our 

unit  could  expect  to  see  in  the  next  12,  24  or  48 

hours . 

13 

Q. 

Did  PFC  Manning  work  in  this  cell? 

14 

A. 

Yes,  he  did. 

15 

Q. 

How  would  you  describe  PFC  Manning  as  a  student 

at  AIT? 

16 

A. 

As  a  student  he  was  very  quiet,  very  reserved. 

Did  not 

17  have,  that  I  saw  at  least  in  the  classroom,  a  lot  of  interaction  with 

18  the  other  students.  He  was  very  studious,  always  full  of  questions. 

19  It  was  —  it  actually  got  difficult  at  times  to  continue  with  the 

20  instruction  because  he  was  always  asking  well,  "Why  is  that?  What  if, 

21  what's  the  meaning  behind  something,"  to  better  understand  what  we 

22  were  teaching. 

23  Q.  At  AIT  did  you  ever  counsel  PFC  Manning? 
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A.  Officially,  no.  Contractors  are  not  allowed  to  counsel. 

But  I  did  sit  in  a  counseling  that  was  done  by  a  green  suiter  for 
him. 

Q.  What  was  his  counseling  for? 

A.  It  was  for  an  operational  security  violation. 

Q.  Can  you  explain  that  operational  security  violation? 

A.  Some  students  came  to  me  and  said,  "Sir,  you  may  want  to 
check  this  out.  There's  a  video  on  YouTube  with  PFC  Manning 
explaining  what  we're  doing."  So  I  took  that  information  to  my  tech 
guy.  We  pulled  up  the  video,  verified  that  it  was  PFC  Manning  on  the 
video  and  then  turned  that  material  over  to  the  OIC  to  handle. 

Q.  Can  you  describe  —  did  you  watch  this  video? 

A.  I  did. 

Q.  Can  you  describe  what  this  video  consisted  of? 

A.  Again,  the  majority  consisted  of  Private  Manning's  face  and 
him  kind  of  talking  to  the  camera,  explaining  what  he  was  going 
through  at  the  schoolhouse,  some  of  the  materials  we  would  be 
covering,  some  of  the  base  unclassified  information  that  we  provided 
on  day  one  was  pretty  much  what  he  was  going  through. 

Q.  During  this  counseling  session,  what  was  Manning  taught, 
what  was  he  told  --  PFC  Manning? 

A.  That  he  would  be  performing  an  operational  security 
briefing  for  the  classroom. 
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ATC [CPT  WHYTE]:  No  further  questions.  Your  Honor. 

MJ:  Cross? 

CROSS-EXAMINATION 

Questions  by  the  assistant  defense  counsel  [MAJ  HURLEY] : 

Q.  Let's  talk  about  that  video,  the  last  thing  that  you 
covered,  Mr.  Moul .  You  were  the  first  AIT  instructor  to  see  this 
video? 

A.  As  far  as  I  know,  yes. 

Q.  And  it  was  posted  to  YouTube? 

A.  Correct. 

Q.  And  you  said  it  contained  an  image  of  PFC  Manning? 

A.  He  was  in  the  video,  yes. 

Q.  Talking  about  his  life  at  AIT? 

A.  Correct. 

Q.  And  what  he  was  studying  there? 

A.  What  he  was  studying,  what  he  would  be  learning,  yes. 

Q.  And  there  were  use  of  sensitive  terms? 

A.  It  was  all  unclassified  what  he  was  saying.  There  was  no 
actual  security  violation  in  terms  of  information  security. 

Q.  He  used  the  term  SCIF;  is  that  right? 

A.  Yes. 

Q.  And  he  talked  about  the  class  schedule? 

A.  Correct. 
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Q.  As  you  just  indicated  those  are  unclassified  items? 

A.  Correct,  they  are  unclassified. 

Q.  At  the  time  that  —  do  you  recall  month  and  year  when  this 
occurred,  you  saw  the  video  and  you  went  through  the  process  you  just 
described? 

A.  This  was  relatively  early  on  in  the  cycle,  so  it  would  be 
towards  the  spring  portion  of  it.  If  I  remember  correct,  he 
graduated  in  August  so  this  would  have  been  May  —  mid-May  timeframe. 

Q.  So,  at  this  time,  PFC  Manning  had  not  received  the  block 
instruction  that  you  went  over  in  such  detail  with  - 

A.  Yes,  he  did. 

Q.  He  had  received  it  at  that  point? 

A.  Correct. 

Q.  But  he  hadn't  been  given  any  classified  information? 

A.  He  had  not  been  privy  to  classified  at  that  moment,  no. 

Q.  Mr.  Moul,  getting  to  this  topic  of  AIT  instruction 
generally.  There  was  a  lot  of  information  over  the  course  of  that  4- 
month  period  given  to  these  AIT  students? 

A.  Correct. 

Q.  And  you  said  you  were  a  Marine  from  2001  to  2005? 

A.  2000  to  2005,  yes. 
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Q.  Well,  in  the  Army,  sometimes  Army  instructions  comes  with 
this  caveat  that  it's  like  drinking  water  from  a  fire  hose.  Have  you 
ever  heard  that  expression? 

A.  Very  familiar  with  the  expression. 

Q.  There  was  a  lot  of  water  coming  out  of  this  hose.  You 
would  agree  with  that? 

A.  I  would,  yes. 

Q.  In  fact,  by  last  count  I  think  he  got  up  to  260  slides  in  a 
particular  block  of  instruction? 

A.  Correct. 

Q.  Now,  towards  the  end  of  your  conversation  with  Captain 
Whyte  you  talked  about  your  personal  observations  of  PFC  Manning? 


A.  Uh-huh. 

Q.  And  then  you  taught  hundreds  of  AIT  students? 

A.  Yes,  I  have. 

Q.  It's  safe  to  say  that  you  don't  remember  them  all? 
A.  Not  all  of  them,  no. 

Q.  But  you  do  remember  PFC  Manning? 

A.  Yes,  I  do. 

Q.  And  you  remember  his  relationships  with  fellow  AIT 


students? 


A.  I  do.  Yes. 

Q.  To  use  your  word,  PFC  Manning  seemed  like  a  loner? 
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A.  Yes.  Yes,  he  did. 

Q.  And  he  appeared  not  to  have  many  friends? 

A.  Correct. 

Q.  You  also  knew  that  PFC  Manning  was  the  butt  of  jokes. 

A.  Yes,  I  do. 

Q.  And,  in  fact,  he  was  the  butt  of  jokes  in  front  of  the 
whole  class? 

A.  Yes,  he  was. 

Q.  To  a  point  that  you  at  one  point  had  to  intervene  and 
admonish  the  rest  of  the  AIT  students  that  they  should  stop  joking  in 
this  manner? 

A.  Correct. 

Q.  Let's  get  back  to  the  video.  You  were  concerned  about  the 
video? 

A.  Yes,  I  was. 

Q.  And  you  directed  your  concerns  to  uniformed  members  of  the 
AIT  staff? 

A.  Yes,  I  did. 

Q.  But  it  appeared  that  this,  that  Chief  Hess  - 

A.  Chief  Hess. 

Q.  That  he  wasn't  going  to  do  anything  about  this? 
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A. 

It  appeared  to  me  that  he  would  do  what  he  wanted  to  and 

whether 

that  meant  actually  punishing  Private  Manning  or  letting  it 

go,  the 

decision  was  his.  I  had  done  my  duty,  yes. 

Q. 

But  you  thought  something  should  be  done? 

A. 

I  did  think  that  at  the  very  least  a  counseling,  a 

conversation  should  be  held,  "Hey,  you  know,  this  is  kind  of 
broaching  a  topic  you  don't  want  to  do  that,  this  could  lead  to  bad 


things. 

don't  do  it  again,"  kind  of  conversation. 

Q. 

And  it  was  your  idea  that  corrective  training  be  done? 

A. 

Yes . 

Q. 

And  the  corrective  training  in  this  instance  was  PFC 

Manning  would  teach  a  class? 


A. 

Correct . 

Q. 

Now,  this  class  was  given? 

A. 

As  far  as  I  know,  yes,  it  was. 

Q. 

You  weren't  present? 

A. 

I  was  not  present  for  the  class,  no. 

Q. 

Now,  just  getting  back  to  the  time  period  that  this 

instruction  that  you  went  over  with  Captain  Whyte  was  given,  you  said 
that  must  have  occurred  in  April  or  May  of  2008? 

A.  It  would  have  been  the  very  first  day  that  they  were 
actually  in  the  classroom  for  a  full  day,  yes. 

Q.  So  it  was  April  of  2008? 
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A.  Correct. 

Q.  And  over  the  course  of  time,  I  guess,  to  —  I  just  want  to 
use  your  expression  correctly  —  at  the  time  this  block  of 
instruction  was  still  in  the  verification  and  vetting  process? 

A.  The  entire  period  of  instruction  from  lessons  1  through  14, 

yes . 

Q.  That  was  in  the  verification  and  vetting  process? 

A.  That  was  in  the  verification  and  vetting  process. 

Q.  But  operational  security  was  not  in  the  verification  and 

vetting  process? 

A.  Correct.  It  had  already  been  finalized.  What  was  taking 
place  was  doctrine  was  changing  so  quickly  down  range  with  the  two 
battles  that  we  had  going  on  in  Iraq  and  Afghanistan,  that  the  meat 
and  potatoes  of  the  course,  the  IPB  process,  the  information  or 
the  excuse  me,  the  ISR  portion  of  the  school,  the  dissemination  of 
information,  the  briefing  and  research,  all  of  lessons  3  through  13 
were  in  such  disarray  and  change  and  doctrinal  issues  that  we  would 
have  to  every  couple  of  months  attempt  to  update  that  in  order  to 
stay  current  with  what's  going  on.  Information  security,  there  was 
really  no  changes  to  that  because  it's  based  off  of  a  doctrine  that 
been  published  for,  I'm  not  sure  of  the  publication  off  the  top  of  my 
head  actually,  but  it's  been  the  same  for  a  few  years  now. 

Q.  Sure. 
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A.  And  there  was  no  change  to  that  part. 

Q.  And  at  the  time  it  was  a  3-day  block  of  instruction? 

A.  Correct. 

Q.  So  you  went  through  some  instruction  one  day? 

A.  Uh-huh. 

Q.  And  then  another  day? 

A.  Uh-huh. 

Q.  And  then  the  third  day  was  when  the  test  was? 

A.  Correct.  The  afternoon  of  the  third  day. 

Q.  One,  two,  three? 

A.  Yes,  sir. 

Q.  And  the  instruction  that  you  gave  for  this  block  of 

instruction  as  you  indicated  Captain  Whyte,  this  was  this  was  with 
PowerPoint? 

A.  It  was  with  PowerPoint,  yes. 

Q.  Exclusively  with  PowerPoint? 

A.  The  instruction  was  from  PowerPoint  it  would  be  me  talking 
to  slides  or  relaying  the  information  and  materials  were  provided  for 
reference  to  the  Soldiers,  yes. 

Q.  Let's  talk  about  WikiLeaks.  WikiLeaks  was  not  mentioned  in 
your  instruction  at  all? 
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A.  Correct.  I  will  be  honest  with  you,  I  never  even  heard  the 
term  WikiLeaks  until  I  was  informed  that  the  accused  had  been 
arrested  for  the  incident  he's  been  accused  of. 

Q.  So  it  wasn't  mentioned  in  terms  of  this  is  a  site  where  the 
enemy  goes  to  get  its  information? 

A.  Correct.  WikiLeaks  was  not  mentioned  by  name. 

Q.  Thanks. 

ADC [MAJ  HURLEY]:  Nothing  further. 

M J:  Redirect? 

ATC [CPT  WHYTE]:  Give  me  5  seconds,  please. 

REDIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Just  two  questions  for  you,  Mr.  Moul .  Were  students 
provided  this  PowerPoint  in  addition  to  your  instruction? 

A.  They  were  provided  a  student  copy  of  the  PowerPoints,  yes. 

Q.  During  your  instruction,  did  you  mention  that  the  enemy 

uses  the  internet  to  collect  intelligence  on  the  United  States? 

ADC [MAJ  HURLEY] :  Objection,  leading. 

MJ:  Overruled. 

A.  I'm  sorry,  say  the  question  again,  please. 

Q.  Did  you  instruct  the  students  that  the  enemy  uses  the 
internet  to  collect  intelligence  on  the  United  States? 

A.  We  did,  yes. 
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Q.  Thank  you. 

MJ:  Anything  else? 

ADC [MAJ  HURLEY]:  No,  ma'am. 

MJ:  Temporary  or  permanent  excusal? 

ATC [CPT  WHYTE]:  Temporary,  Your  Honor. 

[The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 
the  courtroom . ] 

ATC [CPT  OVERGAARD] :  The  United  States  calls  Mr.  Brian  Madrid. 

BRIAN  MADRID,  Civilian,  was  called  as  a  witness  for  the  government, 
was  sworn  and  testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  You  are  Brian  Madrid  of  Buckeye,  Arizona? 

A.  Yes,  ma'am. 

Q.  What  is  your  current  military  status,  Mr.  Madrid? 

A.  I'm  active  duty  retired. 

Q.  When  did  you  retire  from  the  military? 

A.  1  September  2010. 

Q.  How  long  did  you  serve  in  the  military? 

A.  22  years,  22  days. 

Q.  What  was  your  rank  when  you  retired? 

A.  Sergeant  First  Class,  E7 . 

Q.  What  was  your  MOS? 


7691 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 


o 


o 


A. 

35  Tango. 

Q. 

What  does  it  mean  to  be  a  35  Tango? 

A. 

That  is  electronic  warfare,  intelligence  maintainer  and 

integrator 


Q. 

What  does  that  mean? 

A. 

That  means  I  work  on  preparing  and  deploying  all  the 

military  intelligence  systems,  network.  I  work  on  their  PDAs 


laptops. 

computers,  things  of  that  nature. 

Q. 

Did  you  do  that  for  the  entire  22  years  - 

A. 

Yes,  I  did. 

Q. 

-  and  22  days? 

A. 

Yes. 

Q. 

What  was  your  final  position  when  you  left  the  military 

when  you 

retired? 

A. 

I  was  an  AIT,  which  was  Advanced  Individual  Training, 

platoon  sergeant 


Q. 

Where  was  that? 

A. 

At  Fort  Huachuca,  Arizona. 

Q. 

What  is  AIT? 

A. 

Advanced  Individual  Training. 

Q. 

What  is  the  purpose  of  AIT? 
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A.  The  purpose  of  AIT  is  to  give  the  newly  trained  Soldier  out 
of  basic  training  their  career  training,  their  military  occupational 
specialty  training. 

Q.  What  military  occupational  specialty  or  MOS  was  being 
trained  at  the  AIT  where  you  worked? 

A.  I  was  in  charge  of  training  35  Foxtrots,  which  are  military 
analysts . 

Q.  And  what  type  of  training  did  you  receive  to  become  a 
platoon  sergeant  at  AIT? 

A.  We  had  a  month-long  platoon  sergeant’s  training  course  at 
Fort  Huachuca,  Arizona. 

Q.  How  long  were  you  the  platoon  sergeant  at  AIT? 

A.  Roughly  2  years  and  4  months. 

Q.  Do  you  remember  when  that  was? 

A.  It  was  between  February  of  '08  to  June  of  2010. 

Q.  What  were  your  responsibilities  as  the  platoon  sergeant? 

A.  My  responsibilities  were  everything  that  encompassed  the 
Soldier  when  they  were  out  of  the  schoolhouse.  We  ran  ranges.  I  was 
responsible  for  them  from  the  time  they  woke  up  until  the  evening.  I 
arranged  their  appointments  to  make  sure  they  got  to  their 
appointments,  anything  medical,  in-processing,  out-processing, 
everything  that  didn't  encompass  the  schoolhouse. 

Q.  How  many  platoons  have  you  had  at  AIT? 
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A.  I  was  involved  with  roughly  eight. 

Q.  Was  the  MOS  of  all  of  the  Soldiers  the  same  in  all  of  those 


platoons? 

A.  Yes,  they  were  all  35  Foxtrots,  military  intelligence 
analysts . 

Q.  How  many  students  were  in  each  platoon? 

A.  Before  the  surge  it  was  anywhere  between  140  to  180.  After 
the  surge  it  was  180  to  225. 

Q.  Mr.  Madrid,  do  you  know  the  accused  in  this  case? 

A.  Yes,  I  do. 

Q.  How  do  you  know  him? 

A.  I  was  his  AIT  platoon  sergeant. 

Q.  Do  you  know  when  he  attended  the  35  Fox  AIT? 

A.  From  April  to  August  of  2008. 

Q.  And  you  remember  —  how  do  you  remember  him  out  of  the 
thousands  of  35  Foxes  you  had  at  AIT? 

A.  I  had  a  couple  discussions  with  him.  He  was  asking  me 
about  my  job,  which  is  a  35  Tango.  We  were  talking  about  networking 
a  couple  of  times  and  there  was  a  couple  of  times  that  I  had  to 
counsel  him. 

Q.  Was  there  anything  significant  about  his  particular  class? 
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A.  Significant  in  which  —  oh,  yeah.  Well,  by  —  his  class 
was  actually  my  first  —  first  class  that  I  had  actually  taken  the 
reins  on  by  myself. 

Q.  And  how  often  did  you  talk  or  how  often  did  you  see  him? 

A.  Usually  on  a  daily  basis  in  either  passing  in  the  hallway 
or  in  formation. 

Q.  And  how  often  did  you  interact? 

A.  Possibly  once  a  week  if,  you  know,  if  I  didn't  see  him  in 
the  hallway  or  anything  of  the  such. 

Q.  Are  you  familiar  with  the  instruction  that  students  receive 
at  AIT? 

A.  Yes,  I  am  familiar. 

Q.  How  are  you  familiar  with  it? 

A.  I  --  we  were  --  after  I  took  on  being  the  platoon  sergeant, 
our  commander  ordered  us  to  actually  attend  some  of  the  course 
classes  that  the  students  were  going  through  so  we  have  a  grasp  of 
what  they  were  doing  because  most  of  us  weren't  35  Foxtrots. 

Q.  Did  you  attend  classes  in  every  course? 

A.  Yes,  ma'am. 

Q.  Every  cycle  of  students  that  went  through? 

A.  We  were  required  to  attend  at  least  one  hour  a  week  of 
class  time. 

Q.  What  was  the  first  class? 
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A.  The  first  class  was  information  security  or  INFOSEC. 

Q.  At  AIT  did  PFC  Manning  —  did  he  ever  need  any  corrective 


raining? 

A.  Yes,  he  did,  ma'am. 

Q.  Do  you  remember  what  that  was  for? 

A.  That  was  for  —  he  was  —  there  was  an  incident  where  he 
was  posting  videos  on  YouTube  of,  you  know,  personal  videos  on 
YouTube.  And  he  was  giving  —  using  buzz  words  like  Top  Secret  and 
classified  materials.  Top  Secret  buildings  and  words  like  that. 

Q.  Do  you  know  where  that  video  was  filmed? 

A.  I  only  saw  one  of  the  videos  and  it  appeared  that  he  was  in 

his  barracks  room  at  the  time. 

Q.  Were  you  concerned  when  you  viewed  the  video? 

A.  Yes,  it  brought  up  a  red  flag. 

Q.  Why  was  that? 

A.  Because  you're  generally  not  supposed  to  tell  people  that 
you  have  a  Top  Secret  security  clearance  or  use  buzz  words  like  that 
over  an  open  source. 

Q.  What  happened  after  you  saw  the  video?  What  did  you  do? 

A.  We  brought  Manning  in.  I  did  initial  counseling.  I  took 

the  counseling  up  to  the  command  and  we  also  notified  the  security 
personnel . 


Q.  Did  you  do  any  sort  of  corrective  training? 


7696 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 


A.  Yes,  after  the  incident  went  up  to  the  chain  of  command  it 
came  back  down.  Then  I  was  instructed  to  have  him  do  some  corrective 
training  and  what  I  had  him  do  is  write  a  report.  He  presented  me 
with  a  slide  show  and  report.  And  basically  what  we  would  do  is 
every  Friday  we  would  have  a  company  formation  and  he  presented  that 
at  the  Friday  company  formation. 

Q.  How  do  you  remember  all  of  that? 

A.  It  was  my  first  time  having  to  deal  with  this  type  of 
thing.  First  and  only  time,  really. 

Q.  Let's  start  with  the  PowerPoint.  What  was  the  PowerPoint 

on? 

A.  It  was  on  information  security. 

Q.  And  do  you  remember  when  the  accused  gave  you  the 
PowerPoint  portion  of  the  corrective  training? 

A.  It  was  around  11  June  2010.  I'm  sorry,  excuse  me,  2008. 

Q.  Okay.  How  do  you  know  it  was  11  June? 

A.  Because  it  was,  he  had  to  give  the  presentation  on  the  13th 
of  June.  It  was  the  Friday  —  that's  where  our  Friday  formation  was 
going  to  be. 

Q.  Would  you  remember  that  PowerPoint  again  if  you  saw  it? 

A.  Yes,  ma'am. 
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ATC [CPT  OVERGAARD] :  Retrieving  Prosecution  Exhibit  25  for 
Identification  [retrieving  PE  25  for  ID  from  the  court  reporter  and 
handing  it  to  the  witness] . 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  Do  you  recognize  that? 

A.  It  looks  familiar,  ma'am.  Yes,  I  do. 

Q.  And  how  do  you  recognize  it? 

A.  Because  it  was  the  one  that  Private  Manning  had  presented 
to  me. 

Q.  So  do  you  know  if  he  prepared  it  or  not? 

A.  I  am  --  to  my  knowledge  he  did.  It  was  the  one  presented 

to  me.  It  was  supposed  to  be  —  it  was  indicated  in  the  counseling 
that  it  was  supposed  to  be  original  work,  so. 

Q.  What's  the  date  on  that  document? 

A.  Friday,  13  June  2008. 

Q.  Whose  name  is  on  the  front  of  it? 

A.  Private  Manning,  Bradley. 

Q.  Is  that  an  accurate  representation  of  the  PowerPoint  that 
you  remember  him  giving  you  at  AIT? 

A.  Yes,  ma'am. 

ATC [CPT  OVERGAARD]:  Your  Honor,  we  offer  into  evidence 
Prosecution  Exhibit  25  for  Identification  as  Prosecution  Exhibit  25. 
CDC [MR .  COOMBS]:  No  objection. 
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MJ:  May  I  see  it,  please? 

[PE  25  for  ID  was  handed  to  the  military  judge.] 

Prosecution  Exhibit  25  for  Identification  is  admitted. 

ATC [CPT  OVERGAARD] :  Permission  to  publish,  ma'am? 

MJ:  Go  ahead. 

[PE  25  was  published  to  the  Court.] 

[Examination  of  the  witness  continued.] 

Q.  What  was  the  corrective  training  brief  called? 

A.  Operations  Security,  ma'am,  which  is  OPSEC. 

Q.  And  what  topics  did  that  briefing  cover? 

A.  The  definition  of  OPSEC,  types  of  OPSEC  information,  common 

OPSEC  violations,  protections  from  adversaries  and  a  conclusion. 

Q.  And  how  did  the  accused  define  OPSEC  for  you  in  the 
definitions? 

A.  It  defined  it  —  he  defined  it  as  operation  —  protection 
of  information  which  includes  information  on  public  assets,  military 
assets,  personnel,  families  of  personnel  and  matters  of  national 
security. 

Q.  What  types  of  information  needed  to  be  protected  according 
to  the  slide  slow? 

A.  Unclassified  information  would  be  dates,  times,  locations 
and  names,  and  FOUO,  for  official  use  only,  mission-critical 
information  capabilities  and  vulnerabilities. 
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Q.  Was  that  taught  during  the  OPSEC  portion  of  AIT? 

A.  Yes,  ma'am. 

Q.  What  does  this  slide  tell  us? 

A.  It  tells  us  that  I  guess  he's  trying  to  express  the  dates 
and  times  of  certain  events  and  information  about  certain  events  such 
as  large  groups,  public,  military  personnel.  Department  of  Defense 
civilians,  contractors,  officials  which  include  high  ranking  NCOs, 
commanders,  VIPs  which  include  politicians  and  diplomats.  That  the 
dates  and  times  of  their  schedule  should  be  kept  confidential  or  not 
disclosed  to  the  general  public  in  order  for  security  purposes. 

Q.  And  was  that  taught  at  AIT? 

A.  Yes,  ma'am. 

Q.  What  does  this  slide  tell  us? 

A.  That  the  location  of  information  should  be  of  government 
facilities  to  include  public  buildings,  government  agencies,  military 
installations  which  include  the  secure  facilities  on  the 
installations,  weapons  and  eguipment,  training  locations  and  barracks 
should  be  kept  confidential  or  non-disclosed  from  the  enemy  —  from 
the  public  --  general  public  for  security  concerns. 

Q.  Was  that  also  taught  at  AIT? 

A.  Yes,  ma'am. 

Q.  How  about  the  next  slide? 
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A.  Individual  information,  personal  information  such  as  names, 
date  of  birth,  addresses.  Social  Security  numbers,  credit  information 
and  family  members  shall  also  be  kept  confidential  and  not  released 
to  the  public. 

Q.  Was  that  also  taught  at  AIT? 

A.  Yes. 

Q.  How  about  this  slide? 

A.  Official  information  such  as  methods  that  we  use  to  gather 
intelligence,  equipment  we  use  which  are  weapons,  vehicles,  our 
capabilities  of  those  weapons  and  vehicles,  our  vulnerabilities  and 
general  mission  critical  information  should  not  be  disclosed. 

Q.  Was  that  taught  at  AIT  as  well? 

A.  Yes,  ma'am. 

Q.  What  does  this  slide  talk  about? 

A.  Adversaries,  possible  adversaries  to  the  U.S.  Government 
which  would  be  foreign  governments  which  are  rivals  and  enemies, 
nongovernment  organizations  such  as  corporations,  political  groups, 
terrorists,  and  anyone,  you  know,  general  public  which  are  activists 
and  hackers  are  people  that  can  be  a  threat  to  the  U.S.  Government. 

Q.  Was  this  taught  to  the  accused  as  well? 

A.  Yes,  ma'am. 

Q.  And  before  this  brief? 

A.  Yes,  ma'am. 
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Q.  How  about  the  next  slide? 

A.  Common  OPSEC  leaks  are,  he's  expressing  the  written  sources 
such  as  newspapers  and  magazines  can  be  a  leak,  television,  which 
include  news  programs  and  documentaries  can  be  a  leak  and  especially 
the  internet  due  to  the  nature  of  our  world,  the  technological  nature 
of  our  world  they  have  discussion  boards,  chat  rooms,  social 
networking  and  videos.  All  of  these  can  be  avenues  of  leaking 
information. 

Q.  Was  that  also  taught  at  AIT? 

A.  Yes,  ma'am. 

Q.  Finally  the  next  slide,  what  was  PFC  Manning's  conclusion 
on  his  PowerPoint? 

A.  To  conclude  he  would  avoid  disclosure  of  information 
through  public  conversations,  because  you  can  be  heard.  To  avoid 

—  watch  what  you  say  to  journalists,  watch  what  you  post  as  far  as 
information  goes  on  newsletters,  flyers  and  especially  the  internet. 
Use  common  sense  because  we  have  many  enemies  and  we  also  have  a  free 
and  open  society. 

Q.  Is  that  what  35  Foxes  were  taught  at  AIT? 

A.  Yes,  ma'am. 

Q.  Finally,  did  you  have  any  questions  for  PFC  Manning  after 
he  gave  you  the  PowerPoint? 
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A.  Generally,  I  wanted  to  know  that  he  understood  what  he  was 
being  --  why  he  was  receiving  corrective  training  and  if  he 
understood  the  material  and  I  truly  believed  that  he  was  —  that  this 
isn't  an  avenue  that  he  wants  to  go  down,  that  this  --  that 
classified  and  confidential  material  should  be  safeguarded. 

Q.  And  did  he  tell  you  whether  or  not  he  understood? 

A.  Yes,  ma'am. 

Q.  What  did  he  say? 

A.  He  said,  "I  understood  and  it  won't  happen  again." 

Q.  Did  it  happen  again? 

A.  I  believe  so.  That's  why  we're  here  right  now,  ma'am. 

Q.  Did  he  have  any  other  INFOSEC  violations  at  AIT? 

A.  Not  that  I'm  aware  of,  not  that  I  had  to  - 

Q.  And  did  —  you  mentioned  the  presentation  in  front  of  the 
company  as  well? 

A.  Yes,  ma'am. 

Q.  What  information  did  that  cover? 

A.  It  covered  —  it  was  a  general  —  it  was  pretty  much  this 
class  right  here.  It  was,  you  know,  watered  down  a  little  bit 
because  he  didn't  have  the  slides  available  because  it  was  an  outdoor 
environment,  but  he  gave  the  gist  of  the  briefing. 

Q.  And  he  also  mentioned  a  report.  What  was  covered  in  the 
report? 
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A.  It  was  just  a  little  report.  He  expanded  on  what  we  had 
discussed  —  he  had  discussed  in  his  —  in  his  slide  show.  That  was 
initially  what  he  was  supposed  to  give  me  was  a  report,  but  he  chose 
to  give  me  a  slideshow  also. 

Q.  Okay.  All  right.  Thank  you. 

A.  Yes,  ma'am. 

M J :  Cross-examination? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

CROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Mr.  Madrid,  how  are  you? 

A.  Fine,  sir.  How  are  you? 

Q.  Not  too  bad.  As  the  platoon  sergeant  you  said  you  had 
anywhere  from  a  low  of  a  hundred  up  to  200  Soldiers  in  each  platoon; 
is  that  correct? 

A.  Not  every  platoon,  but  around  Manning's  time  I  think  my 
number  was  140. 

Q.  And  the  coursework  was  a  16-week,  3-day,  right? 

A.  Yes,  sir. 

Q.  And  obviously  they  spent  part  of  that  AIT  instruction  in 
the  classroom? 

A.  Yes,  sir. 

Q.  And  part  of  that  in  the  field? 
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A.  Yes,  sir. 

Q.  Now,  the  coursework  that  was  done  in  the  classroom  you  say 
you  sat  in  on  a  couple  of  the  hours  of  the  course? 

A.  Yes,  sir. 

Q.  You  didn't  sit  on  all  of  the  hours? 

A.  Not  all  the  hours,  sir. 

Q.  When  a  student  got  done  with  his  coursework  and  graduated, 
they  were  the  lowest  level  analyst  that  you  could  be  at  that  point; 
is  that  right? 

A.  That's  a  fair  assessment. 

Q.  And  basically  any  expertise  that  they  might  develop  as  an 
analyst  would  be  developed  at  their  follow-up  assignments? 

A.  That's  a  good  assessment. 

Q.  Now,  let's  talk  about  the  video.  During  AIT,  PFC  Manning 
posted  a  few  family  and  friend  videos  on  YouTube,  right? 

A.  Yes,  sir. 

Q.  And  you  only  watched  one  of  those  videos? 

A.  Yes,  only  one  of  them  was  viewable  at  the  time. 

Q.  Wasn't  it  because  --  you  only  saw  one  because  YouTube  was 

blocked  by  your  government  computer? 

A.  YouTube  was  blocked  by  the  government  computer  but  the  way 
we  viewed  it  is  another  student  brought  in  his  personal  laptop  to 
show  us  the  video. 
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Q.  You  had  to  borrow  a  computer  from  one  of  the  students  to 
see  the  video? 

A.  Yes,  sir. 

Q.  Then  you  showed  the  video  to  Captain  Ogletree? 

A.  Yes,  sir. 

Q.  The  video  did  not  talk  about  any  classified  information? 

A.  No.  And  he  didn't  disclose  any  classified  information. 

Q.  He  didn't  talk  about  any  operational  security  type 
information? 

A.  No.  Well,  he  did  because  he  gave  his  schedule  out.  He  was 
giving  his  daily  schedule  out  to  - 

Q.  What  do  you  recall  from  the  daily  schedule  part?  What  did 
he  say? 

A.  When  he  went  to  breakfast,  when  he  went  to  school,  when  he 
came  home  from  school. 

Q.  All  right.  Just  going  to  breakfast  and  school,  that  was 
operational  security? 

A.  Well,  it  was  operational  —  operational  information. 

Q.  All  right.  Was  that  classified? 

A.  It  was  not  classified. 

Q.  This  video  was  from  PFC  Manning  to  his  friends  and  family, 
right? 
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A.  I  believe  so.  I  don't  know  what  the  intended  audience  for 
that  video  was. 

Q.  In  addition  to  talking  about  breakfast  times  and  going  to 
class,  he  also  talked  about  life  in  the  barracks? 

A.  Yes,  sir. 

Q.  He  talked  about  marching  to  class? 

A.  Yes,  sir. 

Q.  Talked  about  how  hard  PT  was? 

A.  Yes,  sir. 

Q.  And  in  the  video  there  was  a  word  SCIF  and  Top  Secret.  He 

11  used  the  words  Top  Secret? 

12  A.  Yes,  sir,  and  security  clearance. 

13  Q.  He  didn't  actually,  as  we  discussed,  discuss  anything  top 

14  secret.  He  used  that  word? 

A.  No  he  did  not.  He  was  using  the  buzz  words. 

Q.  And  those  buzz  words  alone  are  not  classified? 

A.  They're  not  classified. 

Q.  Based  on  the  video  you  thought  corrective  training  would  be 

19  appropriate? 

20  A.  Yes,  sir. 

21  Q.  And  you  said  that  he  did  this  video,  excuse  me,  the 

22  PowerPoint  presentation? 

23  A.  Yes,  sir. 
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Q.  Was  that  done  to  the  whole  class? 

A.  No,  it  was  not  given  --  his  —  he  gave  a  verbal 

presentation.  He  did  not  —  because  he  were  outside,  he  didn't  have 
the  ability  to  present  his  PowerPoint  presentation. 

Q.  So  he  gave  that  PowerPoint  presentation  just  to  you? 

A.  Yes,  sir. 

Q.  And  then  the  verbal  presentation  to  the  class,  that  was 
about  5  minutes,  right? 

A.  Roughly  5  to  7 . 

Q.  Okay,  5  to  7  minutes? 

A.  Yes,  sir. 

Q.  And  that  was  without  the  benefit  of  the  PowerPoint? 

A.  Yes,  sir. 

Q.  Now,  in  there,  you  know  --  I  looked  --  you  see  the 
PowerPoint  presentation.  Nowhere  in  there  does  it  talk  about  places 
where  we  have  actual  knowledge  that  the  enemy  goes  to,  correct? 

A.  Would  you  re  ask? 

Q.  Does  it  list  any  particular  web  sites  that  we  have  actual 
knowledge  that  the  enemy  goes  to? 

A.  No,  it  does  not. 

Q.  From  your  knowledge,  did  they  instruct  as  to  particular  web 
sites  that  the  enemy  actually  went  to? 

A.  No,  they  didn't.  Not  to  my  knowledge. 
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Q.  Now,  after  doing  the  5  minute  class,  5  to  7  minute  class, 
PFC  Manning  was  allowed  then  to  continue  with  the  course? 

A.  Yes,  sir. 

Q.  And  he  ultimately  graduated? 

A.  Yes,  sir. 

Q.  Mr.  Madrid,  I  thank  you  for  your  service  and  thank  you. 

A.  Thank  you  very  much,  sir. 

MJ:  Redirect? 

ATC [CPT  OVERGAARD] :  No,  ma'am. 

MJ:  Temporary  or  permanent  excusal? 

ATC [CPT  OVERGAARD]:  Temporary. 

[The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 
the  courtroom . ] 

MJ:  Counsel,  how  are  we  doing?  Do  we  need  a  brief  recess? 

TC [MAJ  FEIN]:  We're  good  to  continue. 

CDC [MR .  COOMBS]:  Defense  is  fine. 

MJ:  Proceed.  Call  your  next  witness. 

ATC [CPT  WHYTE]:  Your  Honor,  at  this  point  United  States  offers 
on  the  record  one  stipulation  of  expected  testimony.  This  is 
Prosecution  Exhibit  Number  36. 

Stipulation  of  expected  testimony  of  Staff  Sergeant 
Alejandro  Marin,  dated  30  May,  2013.  It  is  hereby  agreed  by  the 
accused,  defense  counsel  and  trial  counsel  that  if  Staff  Sergeant 
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Alejandro  Marin  were  present  to  testify  during  the  merits  and 
presentencing  phases  of  this  court-martial  he  would  testify 
substantially  as  follows: 

Number  1.  I,  Staff  Sergeant  Alejandro  Marin,  am  currently 
deployed  to  Afghanistan  as  a  counterintelligence  analyst  in  the  G2 
intelligence  section  for  the  333  Military  Police  Brigade.  My 
military  occupation  specialty  MOS  is  35  Lima,  counterintelligence 
agent.  My  responsibilities  in  this  position  include  gathering 
technical  information  in  our  area  of  operation. 

Number  2.  From  2002  to  2006,  I  was  enlisted  in  the  United 
States  Marine  Corps  with  an  MOS  of  infantry.  In  July  2007,  I  enlisted 
in  the  United  States  Army  Reserve  with  an  MOS  of  11  Bravo  infantry. 

In  early  2008,  I  reclassified  with  an  MOS  of  35  Foxtrot, 
all-source  intel  analyst.  From  April  2008  until  August  2008,  I 
attended  the  intelligence  analyst  course  at  Advanced  Individual 
Training,  AIT,  in  Fort  Huachuca,  Arizona.  I  was  assigned  to  the 
military  intelligence  battalion. 

Number  3.  PFC  Bradley  Manning  and  I  attended  AIT  together. 
PFC  Manning  and  I  were  in  all  of  the  same  classes  together  at  AIT  and 
received  the  same  instruction.  The  class  consisted  of  approximately 
20  to  25  students,  two  of  whom  were  PFC  Manning  and  me.  I  interacted 
with  PFC  Manning  on  a  daily  basis.  Troy  Moul  was  our  AIT  instructor. 
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Number  4.  At  AIT  I  was  trained  on  pattern  analysis,  which 
is  the  study  of  enemy's  tactics,  techniques  and  procedures,  TTPs,  to 
determine  any  patterns  of  enemy  activity.  I  was  also  trained  on  how 
to  collect  intelligence  products  and  how  to  map  enemy  activity  as 
part  of  pattern  analysis.  I  was  also  trained  extensively  on  the  use 
of  significant  activities,  SIGACTs,  which  are  stored  in  the  Combined 
Information  Data  Network  Exchange,  CIDNE,  database  on  the  secure 
internet  protocol  router  network,  SIPRNET,  a  classified  network.  I 
was  also  trained  that  SIGACTs  consist  of  troop  location,  improvised 
explosive  devices,  IED  attacks  and  assassinations.  Additionally,  I 
was  trained  on  how  to  research,  review  and  pull  SIGACTs  and  plot  them 
on  a  map  for  pattern  analysis. 

Number  5.  At  AIT  I  was  trained  on  a  targeting  process.  I 
was  also  trained  on  how  to  collect  information  on  high  value  targets, 
HVT,  to  include  which  databases  to  use  and  what  type  of  information 
is  helpful  to  the  targeting  process.  I  was  also  trained  that  the 
intelligence  we  provided  on  these  HVTs  may  be  employed  to  carry  out 
military  operations  to  capture  these  persons.  During  this  instruction 
I  was  also  trained  on  how  to  use  Intelink,  a  search  engine  on  the 
SIPRNET  similar  to  Google. 

Number  6.  At  AIT  I  was  trained  on  information  security, 
INFOSEC.  I  was  also  trained  on  the  meaning  of  classification  to 
include  the  different  levels  of  classification.  Specifically,  I  was 
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1  trained  that  the  unauthorized  disclosure  of  the  information 

2  classified  at  the  secret  level  reasonably  could  be  expected  to  cause 

3  serious  damage  to  the  national  security  and  that  the  unauthorized 

4  disclosure  of  information  classified  at  the  confidential  level 

5  reasonably  could  be  expected  to  cause  damage  to  national  security. 

6  I  was  also  trained  on  the  meaning  of  information  marked  For 

7  Official  Use  Only,  FOUO.  I  was  also  trained  to  properly  mark  not 

8  only  classified  documents  at  the  top  and  bottom  of  each  document  but 

9  also  classified  media  devices  with  the  approved  label.  I  was  further 

10  trained  that  we  had  a  personal  responsibility  to  safeguard  classified 

11  information.  I  was  also  trained  that  access  to  classified 

12  information  is  limited  to  those  persons  with  the  proper  security 

13  clearance,  a  signed  Non-Disclosure  Agreement  and  a  need  to  know.  I 

14  was  also  trained  how  to  store,  transmit  and  otherwise  handle 

15  classified  information  consistent  with  Army  Regulation  380-5. 

16  Number  7.  At  AIT  I  was  trained  on  operational  security, 

17  OPSEC.  I  was  trained  not  to  publicly  disclose  anything  that  could  be 

18  useful  to  our  adversaries,  both  foreign  and  domestic.  I  was  also 

19  trained  on  the  dangers  of  putting  information  on  the  internet,  to 

20  include  social  media  web  sites.  I  was  also  trained  on  how  the 

21  enemies  of  the  United  States  including  al-Qaeda,  use  the  internet  by 

22  searching  web  sites  for  many  purposes  such  as  to  collect  intelligence 

23  on  the  United  States  and  for  use  as  propaganda  and  as  a  recruiting 
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tool.  I  was  trained  that  OPSEC  applies  to  unclassified  information, 
such  as  information  relating  to  training  schedules  and  unit  morale. 

At  AIT  I  was  aware  that  PFC  Manning  had  to  give  a  5  minute 
brief  on  OPSEC. 

Number  8.  With  regards  to  Bates  Numbers  00007351  through 
00007426,  00007450  through  0007586,  00007629  through  00007789, 

0000793  through  00008087,  00008152  through  00008288,  00008331  through 
00008522,  00008853  through  00009046,  00009802,  00010037  and  00010722 
through  00010843,  I  have  reviewed  all  of  these  slides.  The 
formatting  of  the  slides  is  very  recognizable  to  me.  As  I  reviewed 
the  slides,  my  memory  makes  me  believe  that  these  were  the  slides 
that  were  given  to  us  at  AIT.  The  slides  were  multiple  classes  and 
one  presentation.  To  the  best  of  my  knowledge,  these  slides  appear 
to  be  the  ones  used  for  our  classes  because  of  the  formatting  and 
content  contained  in  the  slide  show.  I  remember  being  trained  on  the 
consent  of  these  slides  at  AIT  such  as  memorizing  the  CARVERSHP 
mnemonic  device  at  Bates  Number  00010767.  However,  I  cannot  say  for 
certain  that  these  are  the  actual  slides  or  the  actual  information 
from  the  slides  given  to  us  due  to  the  length  of  time  that  has  gone 
by.  It  has  been  5  years  since  I  have  seen  the  slides.  I  also  cannot 
say  for  certain  that  these  are  the  slides  because  not  all  of  the 
slides  were  used  in  all  of  the  classes  due  to  time  constraints  or 
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1  class  being  shortened.  At  a  minimum,  these  slides  are  very  similar 

2  to  the  slides  I  received  at  AIT. 

3  Number  9.  At  AIT,  PFC  Manning  participated  in  a  field 

4  training  exercise,  FTX,  during  which  PFC  Manning  created  various 

5  intelligence  products  such  as  targeting  packets  on  high  value 

6  targets.  I  was  a  team  leader  during  this  FTX  and  had  the  opportunity 

7  to  review  PFC  Manning's  work  product.  PFC  Manning's  strengths 

8  include  computer-related  tasks  such  as  pulling  data  from  databases, 

9  containing  intelligence  products. 

10  Number  10.  I  was  an  all-source  intelligence  analyst  for 

11  approximately  4  years.  In  2012,  I  reclassified  with  an  MOS  of  35 

12  Lima,  Counterintelligence  Agent. 

13  Again,  Your  Honor,  that's  prosecution  Exhibit  Number  36. 

14  Your  Honor,  the  United  States  calls  Staff  Sergeant  Robert 

15  Thomas. 

16  STAFF  SERGEANT  ROBERT  THOMAS,  U.S.  Army,  was  called  as  a  witness  for 

17  the  government,  was  sworn  and  testified  as  follows: 

18  DIRECT  EXAMINATION 

19  Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 


20 

Q. 

You  are  Staff  Sergeant  Robert  Thomas? 

21 

A. 

Yes,  I  am,  sir. 

22 

Q. 

What  is  your  current 

position? 

23 

A. 

I'm  a  staff  sergeant 

in  the  SASMO  at  Fort  Hood,  Texas,  sir 
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Q.  What  is  the  SASMO? 

A.  It's  a  logistical  IT  position. 

Q.  And  what  are  your  responsibilities  in  that  position? 

A.  Basically,  sir,  I  am  an  individual  who  has  leadership  over 

the  section  of  IT  guys. 

Q.  And  where  are  you  currently  stationed? 

A.  Fort  Hood,  Texas. 

Q.  And  how  long  have  you  been  in  the  Army? 

A.  Approximately  19  years  and  8  months. 

Q.  And  what  was  your  MOS  when  you  enlisted? 

A.  It  was  95  Bravo,  which  was  a  military  police  at  that  time. 
Q.  And  how  long  were  you  a  military  police? 

A.  Sir,  approximately  12  years. 

Q.  And  what  happened  after  those  12  years? 

A.  After  those  12  years  I  went  to  become  a  recruiter.  National 
Guard.  And  after  that,  sir,  I  became  35  Fox,  or  went  to  the  school 
in  Fort  Huachuca. 

Q.  How  long  were  you  a  National  Guard  recruiter? 


A.  I  was  a  National  Guard  Recruiter  for  approximately  3  years. 
Q.  And  after  that  you  went  to  the  AIT  for  the  35  Fox  school? 

A.  That  is  correct. 

Q.  What  is  a  35  Fox? 

A.  A  35  Fox  is  an  analytical  - 
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1  Q.  Intel  analyst? 

2  A.  Yes,  basically. 

3  Q.  And  do  you  remember  what  battalion  you  were  assigned  to  at 

4  AIT  at  Fort  Huachuca? 

5  A.  Yes,  sir.  D  Company,  305  MI. 

6  Q.  And  Staff  Sergeant  Thomas,  what  is  your  current  MOS? 

7  A.  My  current  MOS  is  92  Alpha,  logistical  specialist. 

8  Q.  So  let's  talk  about  your  time  at  AIT.  When  did  you  attend 

9  AIT? 

10  A.  Which  AIT,  sir? 

11  Q.  For  35  Fox. 

12  A.  That  would  be  March,  April  2008  to  about  August  2008,  and  I 

13  continued  through  January  '09. 

14  Q.  And  where  did  you  attend  this  AIT  for  Fox  training? 

15  A.  I  attended  Fort  Huachuca,  Arizona. 

16  Q.  What  was  your  rank  at  this  time? 

17  A.  I  was  a  staff  sergeant. 

18  Q.  What  leadership  responsibility  did  you  have  at  AIT? 

19  A.  The  leadership  responsibility  is  --  I  had  the 

20  accountability  and  discipline  of  the  young  Soldiers  —  AIT  Soldiers 

21  while  being  in  class. 

22  Q.  Were  you  the  class  leader  of  your  class? 

23  A.  Yes,  sir. 
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1 

Q. 

And  you  were  responsible  for  accountability  of  those  20 

2 

25 

students? 

3 

A. 

Yes,  sir,  when  the  platoon  sergeant  was  not  around. 

4 

Q. 

And  how  do  you  know  PFC  Manning? 

5 

A. 

PFC  Manning  was  one  of  the  individuals  directly  in  the 

6 

classroom 

with  me  and  sat  about  two  chairs  in  front  of  me. 

7 

Q. 

Do  you  remember  PFC  Manning  in  the  class? 

8 

A. 

Yes,  sir,  I  do. 

9 

Q. 

And  again,  you  were  in  charge  of  accountability  for  all 

10 

the 

Soldiers? 

11 

A. 

Yes,  sir. 

12 

Q. 

How  often,  to  your  memory,  was  PFC  Manning  in  class? 

13 

A. 

I  remember  Manning  being  in  class  every  day  that  I  was  : 

14 

class . 

15 

Q. 

Thank  you,  sir. 

16 

No  more  questions. 

17 

ADC [MAJ  HURLEY]:  No  cross. 

18 

MJ: 

Temporary  or  permanent  excusal? 

19  ATC [CPT  WHYTE]:  Permanent,  Your  Honor. 

20  MJ:  I  just  have  one  question. 

21  [END  OF  PAGE] 

22 
23 
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1  EXAMINATION  BY  THE  COURT-MARTIAL 

2  Questions  by  the  military  judge: 

3  Q.  You  said  you  remember  PFC  Manning  was  in  class  every  day 

4  you  were  in  class.  Do  you  remember  how  often  you  were  absent? 

5  A.  No,  ma'am.  I  went  just  about  every  day.  I  remember  going 

6  every  day. 

7  MJ:  Any  follow-up  based  on  that? 

8  ADC [MAJ  HURLEY] :  No,  ma'am. 

9  ATC [CPT  WHYTE]:  No,  ma'am. 

10  [The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 

11  the  courtroom . ] 

12  ATC [CPT  WHYTE]:  Ma'am,  the  United  States  asks  for  a  15-minute 

13  comfort  break. 

14  M J :  Any  objection? 

15  ADC [MAJ  HURLEY]:  No,  Your  Honor,  but  we  can  also  have  an  802 

16  session? 

17  MJ:  Why  don't  I  do  this,  let's  put  the  court  in  recess  until 

18  1600  or  4  o'clock  and  come  see  me  in  my  chambers  briefly. 

19  Court  is  in  recess. 

20  [The  court-martial  recessed  at  1552,  4  June  2013.] 

21  [The  court-martial  was  called  to  order  at  1426,  4  June  2013.] 
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MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  present  when  the  Court  last  recessed  are  again  present  in 
court . 

Is  the  government  ready  to  proceed? 

ATC[CPT  WHYTE]:  Yes,  ma'am.  The  government  calls  Sergeant 
First  Class  Jose  Anica. 

SERGEANT  FIRST  CLASS  JOSE  ANICA,  U.S.  Army,  was  called  as  a  witness 
for  the  government,  was  sworn  and  testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Your  name  is  Sergeant  First  Class  Jose  Anica? 

A.  Correct. 

Q.  What  is  your  current  position? 

A.  I  am  a  security  NCO  with  the  G2  section  of  the  Brigade 
Modernization  Command. 

Q.  Where  are  you  currently  stationed? 

A.  Fort  Bliss,  Texas. 

Q.  What  are  your  responsibilities  in  that  position? 

A.  I  am  personnel  security  clearance,  physical  security  and 
operations  security. 

Q.  What  is  your  MOS? 

A.  I'm  a  35  Fox. 

Q.  And  all  source  intelligence  analyst? 
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A.  All  source  intelligence  analyst. 

Q.  How  long  have  you  been  a  35  Fox? 

A.  Since  May  of  2006. 

Q.  What  was  your  MOS  before  you  became  a  35  Fox? 

A.  A  medical  laboratory  technician,  a  91  Kilo  at  the  time,  now 

it's  known  as  a  68  Kilo. 

Q.  How  long  were  a  91  Kilo? 

A.  Approximately  4  and  a  half  years. 

Q.  How  long  have  you  been  in  the  military? 

A.  It  will  be  13  years  in  July,  sir. 

Q.  So  let's  talk  about  a  35  Fox.  What  training  did  you 

receive  to  become  a  35  Fox? 

A.  I  had  to  do  Advanced  Individual  Training  at  Fort  Huachuca 
for  5  and  a  half  months,  sir. 

Q.  When  did  you  graduate? 

A.  May  of  2006. 

Q.  What  was  your  first  assignment  out  of  AIT? 

A.  Fort  Drum,  New  York. 

Q.  What  brigade? 

A.  2nd  Brigade  Combat  Team,  10th  Mountain  Division. 

Q.  Let's  talk  about  your  time  at  Fort  Drum.  What  was  your 
position  when  you  arrived  at  Fort  Drum? 
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A.  I  arrived  as  an  intelligence  sergeant  and  then  I  became 
analysis  control  team  NCOIC. 

Q.  What  happened  when  you  arrived  at  Fort  Drum? 

A.  I  had  basically  35  days  to  prepare  for  deployment  to  Iraq. 

Q.  So  you  deployed  to  Iraq? 

A.  I  did. 

Q.  For  how  long  was  that  deployment? 

A.  It  was  15  months  total. 

Q.  So  when  did  you  redeploy  back  to  Fort  Drum? 

A.  Got  back  to  Drum  November  of  2007. 

Q.  How  do  you  know  PFC  Bradley  Manning? 

A.  He  worked  S-2  section  of  the  2nd  Brigade  Combat  Team. 

Q.  When  did  PFC  Manning  arrive  at  Fort  Drum? 

A.  It  was  2008  around  September. 

Q.  And  when  PFC  Manning  arrived  where  was  2nd  Brigade 
scheduled  to  deploy? 

A.  Getting  ready  to  go  to  the  Afghanistan,  sir. 

Q.  What  was  PFC  Manning's  MOS  when  he  arrived? 

A.  35  Fox. 

Q.  What  section  did  he  work  in? 

A.  S-2  section. 

Q.  What  section  did  you  work  in? 

A.  S-2  section. 
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1  Q.  How  often  did  you  interact  with  PFC  Manning? 

2  A.  On  a  daily  basis,  sir. 

3  Q.  What  was  your  position  when  PFC  Manning  arrived? 

4  A.  I  was  acting  team  leader  and  sguad  leader  for  the  section 


6  Q.  Were  you  the  team  leader  of  PFC  Manning? 

7  A.  I  was,  sir. 

What  were  your  responsibilities  in  that  position  as  team 


Q. 

leader? 

A. 


I  had  the  responsibility  of  accountability,  formation  and 

11  physical  training  and  also  intelligence  training  as  well. 

12  Q.  What  was  PFC  Manning's  position  in  the  S-2  section? 

13  A.  He  was  an  intelligence  analyst. 

14  Q.  What  were  his  responsibilities? 

15  A.  His  responsibilities  were  what  any  other  intelligence 

16  analyst  would  be  doing,  intelligence  finished  products  pertaining  to 

17  for  in  our  instances  getting  ready  for  deployment. 

18  Q.  What  networks  did  PFC  Manning  have  access  to  at  Fort  Drum? 

19  A.  The  unclassified  network  and  the  secret  network. 

20  Q.  What  was  the  secret  network? 

21  A.  The  SIPR,  the  SIPR  network  allows  you  to  get  access  to  the 

22  secret  network. 
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Q.  Are  you  familiar  with  the  work  product  that  PFC  Manning  did 
on  the  SIPRNET? 

A.  Yes,  sir. 

Q.  What  type  of  work  product  did  he  do  on  the  SIPRNET  at  Fort 

Drum? 

A.  At  Fort  Drum  we  basically  taught  him  how  to  create  two  or 
three  slides  finished  product  with  his  own  assessment  of  stuff  that 
he  had  ready  that  directly  related  to  the  area  of  operations  we  were 
headed  to. 

Q.  Which  was  Afghanistan? 

A.  Afghanistan  at  the  time,  yes,  sir. 

Q.  What  type  of  information  was  included  in  these  one  or  two 
slides? 

A.  Significant  activities,  IED,  improvised  explosive  devices, 
vehicle-borne  suicide  bombers,  political  assassinations,  kidnappings, 
things  of  that  nature.  Anything  that  was  significant  in  the  area  of 
operations  we  were  going  to. 

Q.  And  how  often  did  PFC  Manning  use  the  SIPRNET  at  Fort  Drum? 

A.  Weekly,  at  least  once  or  twice  a  week,  sir. 

Q.  What  were  some  of  his  strengths  as  a  35  Fox? 

A.  He  was  able  to  data  mine  quickly,  pull  a  lot  of  information 
whenever  we  needed  him  to. 

Q.  Can  you  explain  what  data  mining  is? 
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A.  Yes,  data  mining  is  what  we  call  basic  search.  Like  if  you 
and  I  were  to  go  to  Google  and  search  for  hotels  in  Maryland,  a 
thousand  hits  would  come  up,  but  as  an  analyst  we  data  mine  through 
all  of  those  hits  and  figure  out  which  ones  are  relevant  to  us  and 
that's  the  step  of  a  data  mine. 

Q.  You  said  at  this  time  you  were  still  gearing  up  for 
deployment  to  Afghanistan? 

A.  Yes,  sir. 

Q.  What  predeployment  training  did  you  receive  for  that 
deployment? 

A.  Joint  Readiness  Training  Center  in  Fort  Polk,  Louisiana. 

Q.  That's  JRTC? 

A.  That's  JRTC,  sir,  yes. 

Q.  What's  the  purpose  of  JRTC? 

A.  It's  for  the  brigade  combat  team  to  be  evaluated,  basically 
in  order  to  be  ready  for  combat. 

Q.  What  was  the  focus  theatre  at  that  point? 

A.  It  was  Afghanistan,  sir. 

Q.  When  was  JRTC? 

A.  For  us  it  was  November  2008. 

Q.  And  where  was  it? 

A.  Fort  Polk,  Louisiana. 

Q.  Do  you  remember  how  long  JRTC  was? 
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A.  It  was  around  24  days  total,  sir. 

Q.  At  JRTC  what  section  did  you  work  in? 

A.  I  worked  in  S-2 . 

Q.  And  S-2  is  intelligence? 

A.  S-2  is  intelligence  shop. 

Q.  And  what  section  did  PFC  Manning  work  in? 

A.  The  intelligence  shop,  S-2  as  well. 

Q.  Did  PFC  Manning  attend  JRTC  for  the  entire  time? 

A.  Yes,  sir. 

Q.  How  often  did  you  interact  with  PFC  Manning  at  JRTC? 

A.  On  a  daily  basis. 

Q.  Are  you  familiar  with  the  work  product  that  he  created? 

A.  Yes,  sir. 

Q.  What  was  the  work  schedule  at  JRTC? 

A.  We  ran  24-hour  operations,  which  basically  meant  that  the 
Soldiers  would  have  12-hour  shifts,  so  we  all  had  12-hour  shifts. 

Q.  Can  you  describe  the  type  of  work  that  PFC  Manning  did  at 

JRTC? 

A.  Yes.  He  was  one  of  our  intelligence  analysts,  so  we  had 
him  do  data  mining,  data  mining  of  significant  activities  in  our  area 
of  operations,  in  this  case  it  was  JRTC.  So  we  had  him  doing  a  lot 
of  research.  His  job  was  to  give  us  the  information. 

Q.  And  what  type  of  data  was  he  pulling  for  the  S-2  shop? 
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A.  A  lot  of  information  was  related  to  attacks  that  the 
insurgency  was  doing.  So  anything  that  had  to  do  with  IEDs,  small 
arms  fire,  indirect  fire,  things  like  that. 

Q.  So  what  type  of  information  relating  to  IEDs  would  PFC 
Manning  pull  for  you  all? 

A.  We  were  trying  to  get  him  to  give  us  timelines,  when  they 
were  occurring,  how  often,  where,  so  we  could  build  pattern  analysis 
and  see  if  we  could  target  them,  part  of  the  targeting  cycle. 

Q.  Pattern  analysis?  What  is  pattern  analysis? 

A.  Pattern  analysis  is  basically  you're  trying  to  establish  a 
modus  operandi.  You're  trying  to  figure  out  when,  for  example,  IEDs 
are  being  emplaced,  so  we  could  target  a  certain  IEDs  cell,  we  know 
exactly  where  and  when  to  hit  him. 

Q.  What  happened  after  the  24  days  of  JRTC? 

A.  We  came  back  to  Fort  Drum  and  got  ready  —  we  were  still 
continuing  to  deploy  to  Afghanistan. 

Q.  Let's  talk  about  some  of  the  training  that  you  all  received 
at  Fort  Drum,  specifically  computer  training.  What  computer  systems 
or  regimes  did  intelligence  analysts  use  to  gather  intelligence? 

A.  The  system  was  the  DCGS-A  system. 

Q.  So  what  is  the  purpose  of  a  DCGS  machine? 
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1  A.  It  was  a  tool  that  the  analysts  were  given  to  do  our 

2  finished  products.  We  do  data  mining  on  it.  We  use  the  tools  in  the 

3  DCGS  to  complete  our  products . 

4  Q.  Can  you  explain  for  the  Court  how  a  user  uses  the  DCGS 

5  machine? 

6  A.  Yes.  An  analyst  would  have  to  log  into  the  system  and  open 

7  up  the  multifunction  workstation  and  once  that's  opened  up,  then  you 

8  would  connect  to  the  SIPR,  to  the  secret  network.  Then  you  would 

9  have  the  option  to  do  a  query  search,  based  on  what  you  were  looking 

10  for.  On  the  left-hand  side  you  would  have  databases  that  you  would 

11  have  access  to.  You  click  on  a  box  and  make  sure  that  it's 

12  highlighted  and  you  know  you're  running  a  query  in  that  database. 

13  You  can  click  as  many  as  you  want  and  unclick  as  many  as  you  want, 

14  and  that  will  facilitate  your  search.  You  hit  search  and  depending 

15  on  how  many  databases  are  hit,  it  will  come  up  with  a  list  that  you 

16  can  peruse  through  and  finish  your  data  mining  set  that  way. 

Q.  Did  PFC  Manning  use  the  DCGS  machine? 

A.  Yes,  sir. 

Did  he  have  an  account  on  the  DCGS  machine? 

As  far  as  I  know,  yes,  sir. 

Q.  What  training  was  required  in  order  to  receive  a  DCGS 
22  account? 


15 

on  how  i 

16 

can  per 

17 

Q. 

18 
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19 

Q. 
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21 

Q. 
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1  A.  Before  I  received  an  account  with  the  DCGS  I  had  to  go 

2  through  a  2  week  course.  It  was  provided  as  a  mobile  training  team 

3  to  Fort  Drum.  It  was  a  2  week  straight,  8  hour  a  day,  5  days  a  week 

4  course. 

5  Q.  What  type  of  training  was  included  in  this  course? 

6  A.  This  training  was  directly  related  to  what  we  call  button 

7  knowledge,  showing  us  all  the  buttons.  If  you  click  on  this,  this 

8  will  happen;  if  you  select  this,  this  will  happen. 

9  Q.  Let's  talk  about  some  of  the  hands-on  training  that  PFC 

10  Manning  received  while  at  Fort  Drum.  What  cell  within  the  S-2  shop 

11  was  PFC  Manning  scheduled  to  work  in  during  the  deployment? 

12  A.  What  we  called  the  fusion  cell,  sir. 

13  Q.  Can  you  describe  the  fusion  cell  is? 

14  A.  The  fusion  cell  is  basically,  fuses  intelligence  from 

15  different  disciplines  be  it  human  intelligence,  signals  intelligence, 

16  enemy  intelligence  and  they  all  come  to  us  in  the  fusion  cell  and 

17  it's  our  job  to  make  sense  out  of  all  that  information,  create  a 

18  final  product  to  give  the  commander  and  the  S-2 . 

19  Q.  What  simulated  environment  did  you  create  to  train  PFC 

20  Manning  on  how  to  do  analysis? 

21  A.  Myself  and  Staff  Sergeant  Cunningham,  we  created  a  training 

22  program  ourselves,  basically  we  use  the  format  that  you  would  use  in 

23  theatre.  Of  course  the  information  was  made  up,  so  none  of  it  was 
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classified.  It's  all  unclassified  for  training  purposes  only.  It  was 
the  analyst's  job,  junior  analyst  to  come  in  and  read  the  reports  and 
try  to  pick  out  the  highlights,  find  out  where  the  bad  guys  are,  put 
on  a  map  and  then  brief  us  on  what  they  learned,  kind  of  testing 
their  skills. 

Q.  Was  this  pattern  analysis? 

A.  That's  a  form  of  pattern  analysis  essentially. 

Q.  What  training  was  PFC  Manning  provided  on  what  was 
happening  in  the  AO  in  Afghanistan  at  the  time? 

A.  Yes,  sir.  Inside  our  little  vault  we  had  a  connection  to 
the  secret  internet,  the  SIPR,  excuse  me,  and  we  would  log  on  and  we 
were  able  to  log  into  the  Operation  Enduring  Freedom  knowledge  center 
and  we  would  click  to  specific  areas  of  operation,  specifically  the 
ones  we  were  headed  to.  We  would  pull  down  finished  reports  and 
finished  products  from  there. 

Q.  What  type  of  reports  would  PFC  Manning  read? 

A.  Those  types  of  reports  were  usually  intelligence  summary, 
graphic  intelligence  summary,  assessments  from  intelligence  units 
that  were  already  in  theatre. 

Q.  What  type  of  reporting  is  included  in  these  intelligence 
summaries? 

A.  A  lot  of  it  was  significant  activities,  vehicle  borne  IDs, 
assessments  on  pattern  analysis,  assessments  on  the  enemy  in  the 
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area,  political  figures  that  were  friendly  or  not  friendly  in  the 
area.  That  type  of  things. 

Q.  By  significant  activities,  you  mean  SIGACTs  in  the  CIDNE 
database? 

A.  Absolutely. 

Q.  What  was  the  classification  level  of  these  reports? 

A.  They  were  either  secret  or  unclassified,  sir. 

Q.  What  would  PFC  Manning  do  with  these  intelligence  reports? 

A.  It  was  his  job  to  combine  that  information  and  pick  out  the 

most  relevant,  most  important  data  and  then  create  his  two  slide, 
PowerPoint  presentations  to  be  able  to  brief  the  S-2. 

Q.  Would  he  ever  back  brief  you  on  any  of  these  reports? 

A.  He  back  briefed  me  a  couple  of  times,  yes,  sir. 

Q.  How  often  did  he  generally  back  brief  his  supervisors? 

A.  It  became  a  requirement  once  a  week. 

Q.  And  what  type  of  events  in  the  AO  was  PFC  Manning  briefing 

on? 

A.  It  was  anything  that  had  to  do  with  —  that  was  significant 
for  that  week.  Vehicle  borne  IEDs  were  a  big  thing  at  the  time, 
suicide  bombers  were  still  kind  of  a  low  threat  in  Afghanistan,  but 
we  were  seeing  a  rise,  so  things  like  that  that  where  obviously 
important  is  what  he  would  brief. 
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Q.  What  formal  training  were  intelligence  analysts  provided  by 
the  counter  IEDs? 

A.  For  us,  we  actually  had  a  mobile  training  team  come  to  Fort 
Drum  as  well  and  give  us  a  3-day  course  taught  by  joint  IEDs  taught 
by  the  JIEDDO,  Joint  IED  Defeat  Operations. 

Q.  What  did  this  training  consist  of? 

A.  It  was  a  3-day  course.  It  was  basically  designed  to  teach 

us,  the  analysts,  what  they  did,  show  us  their  finished  product  so 
that  way  when  we  needed  help  finding  about  IEDs  --  IEDs  cells  in  a 
certain  area  we  would  request  information  from  them.  They  taught  us 
how  to  request  information.  Taught  us  basically  what  we  needed  to 
ask  for  so  whenever  it  was  time  for  us  to  ask  for  those  things,  they 
would  be  able  to  give  us  a  product. 

MJ:  I'm  going  to  stop  you  there  for  a  minute.  You're  talking 

about  you're  asking  somebody  for  these  things.  Who? 

WIT:  It's  the  JIEDDO.  I  forget  the  acronym,  ma'am.  It's  the 

Joint  IED  Defeat  Network.  They  are  part  of  the  CIEDOC  counter  IED 

Operations  Center.  They're  CONUS-based  but  they  can  help  us  support 
in  theatre  for  CONUS.  Yes,  ma'am. 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  When  did  this  training  take  place? 

A.  December  2008. 

Q.  Did  PFC  Manning  receive  this  training? 
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A.  I  believe  so,  yes. 

Q.  Did  you  deploy  with  2nd  Brigade  to  Afghanistan  with  PFC 


Manning? 

A.  Not  with  PFC  Manning.  No,  no,  sir. 

Q.  What  happened? 

A.  I  reenlisted  at  station  of  choice  and  PCS,  permanent  change 


of  station. 

ATC [CPT  WHYTE]:  No  further  questions. 

MJ:  Cross-examination? 

CDC [MR.  COOMBS]:  Yes,  ma'am. 

CROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Sergeant  Anica,  I  have  a  few  questions  for  you  about  PFC 
Manning's  duty  performance,  okay? 

A.  Yes,  sir. 

Q.  You  were  PFC  Manning's  squad  leader  for  almost  a  year? 

A.  Roughly.  Actually  it  was  between  September  and  June  so 
that's  like  9  months. 

Q.  Of - 

A.  Between  2008  and  2009. 

Q.  And  you  obviously  got  an  opportunity  to,  at  that  point, 
view  his  duty  performance? 

A.  Yes,  sir. 


7732 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


o 


J 


Q.  And  as  his  squad  leader  you  also  were  responsible  for 
counseling  him;  is  that  correct? 

A.  Yes,  sir. 

Q.  And  you  basically  would  do  end  of  month  counselings? 

A.  I  did  a  few,  yes,  sir,  for  PFC  Manning. 

Q.  And  you  would  also  do  event  oriented  counseling,  is  that 


correct? 

A.  If  needed  to,  absolutely. 

Q.  Have  you  ever  heard  of  the  expression,  "If  it's  not  in  a 
counseling  statement  it  didn't  happen?" 

A.  Absolutely. 

Q.  What  does  that  mean  to  you? 

A.  That  means  that  if  something  is  serious  enough  to  warrant  a 
counseling  statement  then  it  was  your  duty  to  write  it  down. 

Otherwise  if  it  came  time  to  prove  that  something  happened  and  you 
didn't  have  a  record  of  it,  my  signature  and  whoever  I'm  counseling 
signature,  well,  it's  tough  to  prove. 

Q.  And  that  didn't  happen  part  would  mean  that  it  must  not 
have  happened  or  you  would  have  counseled  the  person? 

A.  It  would  be  very  hard  to  prove. 

Q.  With  regards  to  Manning's  duty  performance  you  rated  him 
basically  as  an  average  analyst  at  the  time? 

A.  Yes,  sir. 
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Q.  You  would  agree  with  me  that  he  was  a  young  analyst? 

A.  Junior  analyst  as  we  call  them. 

Q.  Fresh  out  of  AIT? 

A.  Yes,  sir. 

Q.  And  a  junior  analyst  obviously  doesn't  have  enough 
experience  to  be  considered  kind  of  a  go-to  analyst  in  the  shop,  I 
would  imagine? 

A.  Correct,  sir. 

Q.  That  would  fall  more  on  people  like  Staff  Sergeant  Balonek, 
would  you  agree? 

A.  Roger,  usually  the  senior  intelligence  sergeants  or 
experienced  NCOS,  absolutely. 

Q.  Now,  with  PFC  Manning,  there  were  times  that  you  actually 
escorted  him  to  mental  health.  Is  that  correct? 

A.  Yes,  sir,  once. 

Q.  And  there  was  times  where  he  was  having  problems  and  you 
escorted  him  to  behavioral  health? 

A.  Yes,  sir. 

Q.  Did  you  ever  speak  to  PFC  Manning  about  any  issues  that  he 
was  dealing  with? 

ATC [CPT  WHYTE]:  Your  Honor,  objection.  Hearsay. 

MJ:  The  answer  to  that  won't  be,  but  get  ready  to  object  next 

time.  Go  ahead. 
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Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  did  you  ever  speak  to  him  about  any  issues  that  he  was 
dealing  with? 

A.  Not  that  I  can  recall  specifically,  no,  sir. 

Q.  At  any  time  did  PFC  Manning  say  anything  though  that  was 
anti-American? 

ATC [CPT  WHYTE]:  Your  Honor,  hearsay. 

CDC [MR .  COOMBS]:  All  it  requires  is  yes  or  no  answer.  Your 
Honor.  I'm  not  asking  for  the  actual  statement  plus  I'm  not  going  to 
offer  for  the  truth  of  the  matter  asserted. 

MJ:  Are  you  doing  it  under  what  rule? 

CDC [MR.  COOMBS]:  In  this  instance  I  would  be  offering  it  on  the 
effect  on  the  listener  as  far  as  the  question  asking  him  if  he's  ever 
said  anything  anti-American  to  him.  The  rule  would  be  relevance  and 
that  I  think  would  lay  probably  once  Showman,  the  very  next  witness 
testifies.  If  I  have  to,  we  could  temporarily  excuse  this  witness 
after  I'm  done  and  call  him  back,  but  I  think  in  this  instance  it  may 
be  better  just  to  go  ahead  and  elicit  information  from  the  witness 
now  unless  the  government  doesn't  intend  to  ask  these  questions. 

MJ:  Counsel,  I'm  going  to  allow  it.  Go  ahead. 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Did  PFC  Manning  ever  say  anything  anti-American  to  you? 

A.  No,  sir. 
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Q.  Did  he  ever  —  did  you  ever  hear  anyone  report  to  you  that 
PFC  Manning  made  any  anti-American  comments? 

A.  No,  sir.  Not  that  I  can  recall  at  all. 

Q.  Was  Specialist  Showman  one  of  the  Soldiers  that  worked 

underneath  you? 

A.  Yes,  sir. 

Q.  Would  Specialist  Showman  be  somebody  that  would  have  to 
report  information  to  you? 

A.  Absolutely. 

Q.  Now,  I  want  to  ask  you  about  SIPRNET  access  while  in 
Garrison,  okay? 

A.  Yes,  sir. 

Q.  How  large  was  the  room  that  the  analysts  worked  in  when 
they  would  work  on  SIPRNET? 

A.  Which  building,  sir?  We  have  two  different  buildings. 

Q.  Let's  talk  about  the  first  one. 

A.  It  was  very  small,  sir.  I  don't  know  the  diameter  or  the 
dimensions  of  it  but  it  was  pretty  small. 

Q.  Some  described  it  as  a  closet.  Would  that  be  accurate? 

A.  I  thought  it  was  a  closet  until  you  noticed  the  giant  iron 
door  and  realize  it's  not  a  closet. 

Q.  How  many  SIPR  computers  did  analysts  have  the  ability  to 
work  on? 
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1  A. 

I  think  two  at  most,  sir.  I  think  we  had  drops  for  more 

2  than  that, 

,  but  I  think  we  only  connected  two  at  a  time. 

3  Q. 

Before  you  left,  did  the  SIPRNET  access  change  to  a 

4  different 

location? 

5  A. 

Yes,  sir. 

6  Q. 

And  where  did  it  change  to? 

7  A. 

We  just  moved  down  the  road  to  a  different  headquarters 

8  building 


9  Q. 

And  did  you  have  more  SIPRNET  drops  to  work  off? 

10  A. 

We  did,  yes,  sir. 

11  Q. 

Did  you  actually  have  more  SIPRNET  computers  to  work  off 

12  of? 


13  A. 

Eventually,  yes,  sir,  when  we  got  the  DCGS  laptops,  then  we 

14  connected  them  to  the  server.  They  were  designed  to  be  connected  to 

15  the  SIPR. 

16  Q.  And  in  spite  of  having,  I  guess,  the  additional  drops  and 

17  computers  to  work  off  of,  analysts  really  didn't  work  on  SIPRNET  all 

18  that  often? 


19  A. 

Correct,  sir. 

20  Q. 

And,  in  fact,  mostly  maybe  once  a  week  or  twice  a  week  at 

21  the  most? 


22  A. 

Yes,  sir. 

23  Q. 

For  a  very  short  period  of  time? 
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A.  Roger.  I  would  say,  I  mean,  a  couple  hours.  However  long 
it  took  for  the  analysts  to  get  the  information  they  needed,  sure. 

Q.  So  unlike  a  deployed  environment  where  an  analyst  would  be 
working  on  SIPRNET  basically  the  entire  time  - 

A.  Almost  the  entire  12  hours,  yes. 

Q.  In  a  garrison  environment,  they  were  not  working  on  SIPRNET 
the  entire  time? 

A.  Definitely  not  anywhere  near  12  hours,  sir. 

Q.  Okay.  I  want  to  ask  you  some  —  You  were  asked  some 
questions  about  intelligence  work  products  that  PFC  Manning  created, 
correct? 

A.  Yes,  sir. 

Q.  I  want  to  ask  you  if  you  are  familiar  with  some 
intelligence  terms,  terms  that  might  be  in  a  work  product.  All 
right? 

A.  Yes,  sir. 

Q.  Have  you  ever  heard  of  the  term  "intelligence  gap?" 

A.  Yes,  sir. 

Q.  What  does  intelligence  gap  mean  to  you? 

A.  Intelligence  gap  is  something  that  is  part  of  the  commander 
PIR,  the  Priority  Intelligence  Requirements.  If  we  don't  know,  if  we 
identify  formally  as  intelligence  gap  and  try  to  identify  assets  that 
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can  collect  against  it  in  order  for  it  to  not  become  an  intelligence 
gap. 

Q.  If  it's  listed  as  an  intelligence  gap,  would  I  be  correct 
in  saying  that  that's  something  you  do  not  have  actual  knowledge  of? 

A.  Or  very  little,  absolutely. 

Q.  In  fact,  intelligence  gaps  means  you  need  to  get 
information  in  order  to  confirm? 

A.  Basically  that  is,  sir. 

Q.  If  you  had  actual  knowledge  of  the  fact,  would  you  list  it 
as  an  intelligence  gap? 

A.  Most  likely,  no.  It  goes  through  a  review.  If  the 
question  had  been  answered,  it  wouldn't  likely  get  approved  as  an 
intelligence  gap. 

Q.  Right.  You  would  call  it  intelligence  at  that  point? 

A.  Or  information  if  it  wasn't  a  finished  product. 

Q.  Likely  as  well  with  regards  to  assumption,  are  you  familiar 
with  the  term  assumption  in  intelligence  work  product? 

A.  Sure,  absolutely. 

Q.  If  you  had  actual  knowledge  of  the  fact,  would  you  call  it 
an  assumption? 

A.  No.  No,  sir.  Not  if  it  was  something  that  we  confirmed, 

no . 
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Q.  And  again,  if  you  had  actual  knowledge  of  it,  you  would 
call  it  intelligence  or  information? 

A.  Absolutely,  sir. 

Q.  Even  though  you  didn't  deploy  with  PFC  Manning  in  2009,  you 
have  been  deployed  since  2009.  Is  that  correct? 

A.  Yes,  sir. 

Q.  And,  in  fact,  you  deployed  in  2011? 

A.  Yes,  sir. 

Q.  And  where  did  you  deploy? 

A.  To  Afghanistan;  Kabul,  Afghanistan. 

Q.  And  what  was  your  MOS  when  you  deployed? 

A.  35  Fox,  sir. 

Q.  As  a  35  Fox  did  you  use  SIGACTs  when  you  were  deployed? 

A.  Yes,  sir. 

Q.  And  when  you  were  in  Afghanistan  did  anyone  put  out  any 
information  that  SIGACTs  that  predated  January  of  2010,  shouldn't  be 
used? 

A.  No,  sir,  not  that  I  can  recall. 

Q.  In  fact,  did  you  use  SIGACTs  that  predated  January  2010? 

A.  Yes,  sir,  I  did. 

Q.  What  did  you  use  those  for? 

A.  Part  of  my  job  was  to  tie  SIGACTs  to  certain  people  — 
people  that  would  want  it  to  work  and  not  --  I'm  talking  about  local 
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Afghans.  I'm  not  talking  about  anybody  else.  So  part  of  my  job  was  to 
screen  them.  In  order  to  work  on  a  USFOB  we  ran  a  report  or  query  on 
their  name  or  ID  card  number  and  a  report  came  back  2008,  2009,  then 
we  would  use  it,  review  it.  If  it  was  pertinent,  we  would  provide  it 
to  the  Cl  agents  whoever  were  around  to  be  able  to  handle  the 
interrogation,  for  example. 

Q.  In  2009,  2010  timeframe,  even  though  you  weren't  deployed, 
you  were  still  a  35  Fox,  correct? 

A.  Yes,  sir. 

Q.  Did  you  ever  hear  the  SIGACTs  database  not  being  available 
to  you  as  a  35  Fox? 

A.  Between  2009  and  2010? 

Q.  Correct. 

A.  No,  sir.  I  also  had  access  to  it. 

Q.  So  it  was  never  where  you  no  longer  had  access  to  the 
database? 


A.  Roger. 

Q.  And  to  this  date,  have  you  ever  been  told  that  you  cannot 
use  SIGACTs  that  predate  January  2010? 

A.  No,  sir. 

CDC [MR .  COOMBS]:  Thank  you.  Sergeant. 

MJ:  Redirect? 

ATC [CPT  WHYTE]:  One  moment.  Your  Honor. 
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REDIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Sergeant  Anica,  on  cross  the  defense  asked  you  about 
SIGACTs  that  predate  a  certain  time.  During  your  deployment  in  2007, 
when  you  went  to  —  I  think  you  said  Iraq? 

A.  Yes,  sir. 

Q.  What  significant  event  happened  during  that  time? 

A.  Yes,  sir,  the  most  significant  event  that  happened  was  what 
we  called  a  DUSTWUN.  The  acronym  is  duty  status  whereabouts  unknown. 

In  2007,  May  12th,  our  unit  —  one  of  our  units  - 

MJ:  Just  a  moment.  Yes? 

CDC [MR.  COOMBS]:  Relevance. 

ATC [CPT  WHYTE]:  Your  Honor,  the  defense  argued  or  brought  out 
information  from  the  witness  that  the  SIGACTs  were  of  little  value  if 
they  predated  the  certain  time.  This  completely  rebuts  that  for 
reason  to  believe.  Your  Honor,  for  instance. 

MJ:  All  right. 

CDC [MR.  COOMBS]:  I  didn't  believe  I  did  that,  but. 

MJ:  I'll  overrule  the  objection. 

Go  ahead. 

CDC [MR.  COOMBS]:  That's  fine. 
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Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Sergeant  Anica,  you  said  in  2007,  there  was  a  DUSTWUN 
incident? 

A.  Yes,  sir.  DUSTWUN  incident.  One  of  our  battalions  had  a 
patrol  out  securing  an  IED  hot  spot,  and  they  came  under  attack,  and 
basically  lost  two  Soldiers  that  were  unaccounted  for  and  became  a 
DUSTWUN  incident. 

Q.  What  were  you  tasked  to  do  in  response  to  this  event? 

A.  We  were  trying  to  figure  out  where  they  were,  who  took 
them.  We  were  tasked  to  direct  assets  towards  finding  the  two 
Soldiers  that  were  missing. 

Q.  What  type  of  information  did  you  pull? 

A.  We  tried  to  pull  as  much  information  as  we  could  from  the 
SIPR,  from  the  secret  network.  We  were  looking  for  intelligence 
information  reports,  actual  source  information.  We  were  looking  for 
significant  activities  such  as  small  arms  attacks  in  that  area,  IEDs 
that  had  been  placed  in  that  area  because  small  arms  fire  and  IEDs 
were  both  part  of  the  attack. 

Q.  How  far  back  did  you  go  for  the  SIGACTs? 

A.  We  went  as  far  back  —  this  happened  in  2007,  so  we  were 

looking  for  reports  in  2004,  we  were  looking  for  reports  in  2005, 
2006.  Now,  the  reason  why  we  were  looking  for  2006,  —  2005  excuse 
me,  was  because  the  same  thing  had  happened  to  our  —  the  unit  that 
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we  took  over  for,  the  same  thing  happened,  small  patrol  was  out  there 
and  they  were  ambushed  and  turns  out  it  was  the  same  folks  that  had 
done  it. 

Q.  Were  those  SIGACTs  from  4  years  ago  helpful  to  your 
mission? 

A.  Absolutely.  They  were  able  to  tie  everything  together  and 
give  us  the  fire  power  we  needed  to  put  them  on  our  target  list. 

Q.  You  also  —  just  lastly,  you  also  talked  about  intelligence 
gaps.  The  defense  asked  you  a  question  about  that? 

A.  Yes,  sir. 

Q.  For  an  intelligence  gap,  you  have  to  --  can  you  explain 
again  what  an  intelligence  gap  is? 

A.  Yes,  sir.  You  look  at  the  commander's  priority  and 
intelligence  requirements  and  if  something  that  is  not  answered  or 
that  we  know  is  not  answered,  we  put  it  as  an  intelligence  gap.  It's 
formalized.  It's  published  so  everybody  can  see  them  and  be  able  to 
task  assets  to  try  to  collect  information  on  it.  Whether  to  confirm 
or  deny  it,  it's  up  to  whatever  information  we  collect,  but  it  has  to 
be  a  formalized  process. 

Q.  So  if  you  know  a  little  bit  about  something  and  you  don't 
know  everything  - 

A.  It's  still  an  intelligence  gap. 

CDC [MR .  COOMBS]:  Objection.  Leading. 
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MJ:  Overruled  on  that.  Go  ahead. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  I'm  sorry,  what  was  your  answer? 

A.  If  you  know  a  little  bit,  but  we  need  to  it  confirm,  sure, 
it  can  be  an  intelligence  gap,  absolutely. 

ATC [CPT  WHYTE]:  Thank  you.  Sergeant  Anica. 

MJ:  Brief  recross? 

CDC [MR .  COOMBS]:  Just  very  briefly.  Your  Honor. 

RECROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Sergeant  Anica,  the  SIGACTs  that  you  use  for  the  DUSTWUN 
issue,  that  was  basically  going  back  using  historical  data;  is  that 
correct? 

A.  Essentially,  yes,  sir.  We  had  to  start  somewhere. 

Q.  SIGACTs,  what  they  do  is  they  capture  an  event  on  a 
particular  day  and  it's  by  the  lowest  level  unit,  the  unit  on  the 
ground  that  dealt  with  what  happened? 

A.  Yes,  sir. 

Q.  And  then  that  goes  into  CIDNE;  is  that  correct? 

A.  Yes,  sir. 

Q.  And  as  an  analyst,  you  use  SIGACTs  basically  to  connect 

dots? 

A.  That  is  part  of  the  process,  yes,  sir. 
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Q.  So  for  an  analyst  the  SIGACTs  database  is  basically  a  big 
historical  document  of  what  happened? 

A.  Absolutely. 

Q.  And  from  that  historical  document  you  can  pull  certain 
facts  that  might  go  into  intelligence  product;  is  that  correct? 

A.  Yes,  sir. 

Q.  And  then  with  that  intelligence  product  you  can  connect 
dots  that  maybe  other  people  who  don't  have  your  training  wouldn't  be 
able  to  make? 

A.  Correct,  sir. 

Q.  That's  a  skill  that  takes  time? 

A.  Absolutely. 

Q.  And  not  everyone  is  good  at  that? 

A.  Not  from  my  experience,  sir. 

Q.  With  regards  to  the  intelligence  gap,  I  just  want  to  make 
sure  I  have  this  crystal  clear.  If  it's  in  a  product  that  says  this 
is  an  intelligence  gap  that  means  we  don't  know  for  certain;  is  that 
right? 

A.  Yes,  sir.  Or  we  need  to  confirm  whether  we  know  it's  true 
or  not  if  it's  that  important. 

Q.  So  you  don't  know  it,  you  need  to  try  to  confirm  something 
so  you  wouldn't  have  actual  knowledge  of  it? 

A.  Absolutely  sir,  yeah. 
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1  Q.  Thank  you. 

2  MJ:  Final  redirect? 

3  ATC [CPT  WHYTE]:  No,  Your  Honor. 

4  MJ:  Temporary  excusal? 

5  ATC [CPT  WHYTE]:  Yes,  ma'am.  Temporarily. 

6  [The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 

7  the  courtroom . ] 

8  ATC [CPT  WHYTE]:  Based  on  the  projected  length  of  Ms.  Showman, 

9  may  we  have  a  10-minute  break? 

10  MJ:  Any  objection? 

11  CDC [MR .  COOMBS]:  No  objection.  Your  Honor. 

12  MJ:  Court  is  in  recess  until  5  o'clock  or  1700. 

13  [The  court-martial  recessed  at  1657,  4  June  2013.] 

14  [The  court-martial  was  called  to  order  at  1710,  4  June  2013.] 

15  MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

16  parties  present  when  the  court  last  recessed  are  again  present  in 

17  court  except - 

18  TC [MAJ  FEIN]:  Captain  Morrow  is  absent,  ma'am. 

19  MJ:  Captain  Morrow  or  Captain  Overgaard? 

20  TC [MAJ  FEIN]:  Both  are  actually  absent,  ma'am.  We  had  Captain 

21  Overgaard  for  the  last  session. 

22  MJ:  All  right.  I  met  in  the  chambers  with  the  attorneys  for 

23  about  5  minutes  and  we  had  met  earlier  to  discuss  this  potential 
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1  issue  as  well.  The  initial  plan  had  been  to  go  forward  with  the  next 

2  witness.  However,  the  witness  is  expected  to  maybe  have  some  lengthy 

3  testimony  so  rather  than  do  that,  what  the  parties  have  proposed  is 

4  that  we  have  gone  through  the  trial  a  little  more  rapidly  than  we 

5  anticipated,  so  we  are  going  to  go  through  and  start  tomorrow  morning 

6  at  0930  like  we  usually  do  with  the  witness  that  was  scheduled  to 

7  appear  today.  We  are  going  to  go  through  with  the  remaining 

8  witnesses  that  we  have  scheduled  to  testify  this  week  tomorrow.  So 

9  we  are  going  to  be  going  on  a  recess  after  court  tomorrow  ends 

10  whenever  that  is,  and  then  we're  going  to  be  on  a  recess  until 

11  Monday.  So  I  want  to  make  sure  I  put  that  out  so  anybody  who  had 

12  travel  plans  could  adjust  it  accordingly. 

13  Does  either  side  have  anything  further  to  add  to  my 

14  synopsis  of  the  R.C.M.  802  session? 

15  TC [MAJ  FEIN]:  No,  Your  Honor. 

16  CDC [MR .  COOMBS]:  No,  Your  Honor. 

17  MJ:  Do  we  have  any  further  business  we  need  to  address  today? 

18  CDC [MR .  COOMBS]:  No,  Your  Honor. 

19  TC [MAJ  FEIN]:  No,  Your  Honor. 

20  MJ:  Court  will  be  in  recess  until  0930  tomorrow. 

21  [The  court-martial  recessed  at  1712,  4  June  2013.] 

22  [END  OF  PAGE] 
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W  [The  court-martial  was  called  to  order  at  0942,  5  June  2013.] 

MJ:  Court  is  called  to  order. 

Major  Fein,  please  account  for  the  parties. 

TC [MAJ  FEIN]:  Ma'am,  all  parties  when  the  Court  last  recessed 
are  again  present,  with  the  addition  of  Captain  Overgaard. 

MJ:  Thank  you  very  much. 

Before  we  proceed  today  I  received  a  letter  on  the  3rd  of 
June  2013,  with  letterhead  entitled  Freedom  of  the  Press  Foundation. 
I've  had  that  marked  as  an  appellate  exhibit.  May  I  see  it,  please? 
[AE  563  was  handed  to  the  military  judge.] 

MJ:  It  is  Appellate  Exhibit  563  and  it  is  discussing  a 

stenographer.  It's  a  request  addressed  to  me  and  to  Major  General 
Linnington,  the  Convening  Authority,  to  allow  a  stenographer  in  the 
media  room. 

Major  Fein,  what  is  the  status  of  a  stenographer? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Ma'am,  the  Public  Affairs  Office 
does  have  or  did  authorize  the  stenographer  per  the  court  rules  to  be 
in  the  media  operations  center,  so  long  as  the  equipment,  just  like 
all  the  other  equipment  that's  authorized  under  the  court  rules,  does 
not  do  any  recording. 

MJ:  So  what  you're  telling  me  then  is  there  is  a  stenographer 

in  the  media  operations  center? 


7749 


© 


a 


1  TC [MAJ  FEIN]:  Yes,  there  is  one  authorized.  I  have  not 

2  confirmed  whether  this  morning  there  is  one,  but  there  was  one  on 

3  Monday  and  Tuesday. 

4  MJ:  All  right.  And  if  you  could,  just  for  the  record,  is  the 

5  government  aware,  is  the  theater  overflow  room  operational,  is  it 

6  necessary?  Please  just  describe. 

7  TC [MAJ  FEIN]:  Yes,  ma'am.  As  described  on  the  first  day,  the 

8  theater  as  the  overflow  to  the  trailer  outside  the  front  door  of  the 

9  courthouse,  which  is  the  overflow  of  the  actual  courtroom  was  in  use, 

10  although  there  are  some  technical  difficulties  at  different  times. 

11  As  of  yesterday,  Your  Honor,  the  theater  is  not  being  used  anymore, 

12  although  available  if  needed  because  there  is  not  an  overflow  of  the 

13  trailer  area  outside  of  the  courthouse. 


14 

MJ:  All  right. 

Thank  you  very  much. 

15 

TC [MAJ  FEIN] : 

Yes,  ma'am. 

16 

MJ:  Is  there  anything  else  we  need  to  address  before  we  proceed 

17 

with  the  trial? 

18 

TC [MAJ  FEIN] : 

No,  Your  Honor. 

19 

CDC [MR.  COOMBS] 

:  No,  Your  Honor. 

20 

MJ:  Government, 

call  your  next  witness. 

21 

ATC [CPT  OVERGAARD] :  United  States  calls  Miss  Jihrleah  Showman. 
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JIHRLEAH  SHOWMAN,  civilian,  was  called  as  a  witness  for  the 
government,  was  sworn  and  testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  And  you  are  Miss  Jihrleah  Showman? 

A.  Yes. 

Q.  Could  you  state  your  city  and  state  for  the  record? 
A.  Hamilton,  Georgia. 

Q.  Are  you  currently  on  active  duty? 

A.  No. 

Q.  And  when  did  you  come  off  of  active  duty? 

A.  June  26,  2011. 

Q.  What  was  your  rank  when  you  left? 

A.  Specialist. 

Q.  How  long  did  you  serve? 

A.  I  served  for  4  years  and  2  months. 

Q.  And  what  was  your  MOS  when  you  were  on  active  duty? 

A.  35  Foxtrot. 

Q.  Were  you  ever  assigned  to  Fort  Drum? 

A.  Yes. 

Q.  When  were  you  at  Fort  Drum? 

A.  March  2009. 

Q.  What  unit  were  you  assigned  to? 
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A.  2nd  Brigade  Combat  Team,  part  of  the  10th  Mountain 
Division . 

Q.  What  section  did  you  work  in? 

A.  S-2 . 


Q.  What  leadership  responsibilities  were  you  given  when  you 
arrived  there? 

A.  I  was  assigned  as  a  35  Foxtrot  team  lead. 

Q.  What  does  it  mean  to  be  a  35  Fox  team  lead? 

A.  It  means  that  I  coordinate  all  taskings  and  all  the 
responsibilities  of  all  the  35  Foxtrots  below  me,  making  sure  they're 
in  the  right  place  at  the  right  time  in  the  right  uniform. 

Q.  Do  you  know  the  accused  in  this  case? 

A.  I  do. 

Q.  How  do  you  know  him? 

A.  I  was  his  team  leader. 

Q.  Do  you  remember  when  you  first  met  him? 

A.  It  was  in  March  of  2009. 

Q.  And  how  long  were  you  at  Fort  Drum? 

A.  I  was  at  Fort  Drum  approximately  from  March  to  October  of 
2009,  and  then  following  deployment  until  2011. 

Q.  And  during  this  time,  how  often  did  you  interact  with  PFC 
Manning? 

A.  Every  day  during  the  work  week. 
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Q.  And  did  you  ever  discuss  any  non-work  related  topics? 

A.  There  were  times  that  we  had  non-work  related 

conversations . 

Q.  And  when  was  that? 

A.  That  was  typically  anytime  I  drove  him  to  any  duty 
responsibilities.  I  was  —  I  drove  him  to  locations  off  of  the 
actual  brigade  site  and  we  would  have  casual  conversation. 

Q.  Would  you  talk  about  social  situations  at  all? 

A.  Yes. 

Q.  And  what  did  you  talk  about  with  regard  to  those  social 
situations? 

A.  Typically  the  conversations  involved  his  topic  of  choosing. 
He  talked  a  lot  about  liking  to  attend  martini  parties  in  the  D.C. 
area,  having  multiple  friends,  influential  status  in  politics  or  even 
in  the  Pentagon,  then  he  would  like  to  talk  about  how  he  loved 
shopping  and  working  before  he  joined  the  military,  working  as  a 
barista  at  Starbucks. 

Q.  Did  you  ever  talk  about  computers  at  all? 

A.  Yes. 

Q.  And  what  did  PFC  Manning  say  about  computers? 

A.  He  indicated  to  me  that  he  was  very  fluent  in  anything 
computer.  He  spoke  their  language.  There  was  nothing  that  he  could 
not  do  on  a  computer. 
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Q.  Did  he  talk  about,  while  you  were  deployed  did  he  talk 
about  anything  specific  with  regard  to  the  computers  you  were  working 
on? 

A.  He  indicated  —  not  necessarily  the  computers  we  were 
working  on,  but  the  portals  that  we  had  to  access  when  we  first 
arrived.  We  were  having  issues  getting  access  to  some  division 
portals.  He  indicated  to  me  that  their  passwords  were  not 
complicated  and  he  can  always  get  through  them. 

Q.  So  you  mentioned  —  you  mentioned  deploying.  When  did  you 
deploy? 

A.  Left  Fort  Drum  October  11,  2009. 

Q.  And  that  was  with  2-10? 

A.  Yes. 

Q.  And  where  did  you  go? 

A.  We  initially  went  to  Kuwait  where  we  stayed  for 
approximately  2  weeks,  and  then  we  went  from  Kuwait  to  FOB  Hammer, 
Iraq. 

Q.  When  did  you  arrive  in  Iraq? 

A.  It  was  —  I  don't  know  the  specific  day,  but  it  was  between 
the  25th  and  28th,  I  believe,  of  October. 

Q.  And  do  you  know  when  PFC  Manning  arrived? 

A.  It  was  the  same  timeframe. 

Q.  How  do  you  know  that? 
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A.  We  traveled  together. 

Q.  And  then  you  said  you  were  at  FOB  Hammer? 

A.  Yes. 

Q.  Where  was  that? 

A.  That  was  in  our  brigade's  AO,  we  were  on  the  east  side  of 


Baghdad.  I  don't  know  the  exact  mileage  on  the  east  side  of  Baghdad, 
but  we  are  in  the  middle  of  nowhere  on  the  east  side  of  Baghdad. 


Q.  And  where  did  you  work  when  you  were  at  FOB  Hammer? 

A.  I  worked  at  brigade  headquarters  which  facilitated  brigade 
TOC  and  the  brigade  fusion  cell  inside  of  the  brigade  SCIF. 

Q.  And  did  PFC  Manning  work  in  the  SCIF  with  you? 

A.  Yes. 

Q.  What  unit  did  you  replace  when  you  got  to  FOB  Hammer? 

A.  It  was  3-82. 

Q.  Was  there  a  transition  process? 

A.  Yes. 

Q.  And  how  long  was  that  transition  process? 

A.  It  was  approximately  2  to  3  weeks. 

Q.  So  when  was  2-10  fully  in  control  of  the  SCIF? 

A.  I  would  say  the  first  part  of  November,  the  first  week,  the 
first  week  or  two  of  November. 

Q.  Why  do  units  have  the  transition  process? 
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1  A.  To  ensure  that  there's  no  information  gap,  especially  in 

2  the  intel  field,  if  they  know  information  on  the  enemy  location  or 

3  anything  like  that  that  we  need  to  know  about  as  soon  as  our  units 

4  start  moving  out,  it's  very  important  that  we  take  on  any  information 

5  that  they  have  gathered  up  until  that  point. 

6  Q.  What  was  the  S-2  mission  when  you  were  at  FOB  Hammer? 

7  A.  The  S-2  mission  ultimately  was  to  support  the  brigade,  and 

8  the  brigade's  mission  was  to  support  Iraq,  so  with  that  said  we 

9  gathered  information  from  the  Iraqis  and  our  units  on  the  ground  and 

10  we  were  to  facilitate  good  operational  pictures  for  the  brigade 

11  commander  so  he  could  assist  the  Iraqis  as  well  as  possible. 

12  Q.  Could  you  explain  how  the  35  Foxtrots  were  divided  in  the 

13  S-2  shop? 

14  A.  Yes.  We  were  divided  into  Sunni  and  Shia  groups. 

15  Q.  And  why  was  the  shop  divided  that  way? 

16  A.  Because  a  large  majority  of  the  enemy  activity  happened  to 

17  be  Shia,  but  we  also  had  a  strong  Sunni  population  in  that  area,  so 

18  there  was  a  lot  of  communication  happening  between  the  Sunni,  and  so 

19  to  prevent  any  type  of  confusion  happening  between  products  being 

20  made,  they  felt  that  it  was  better  to  divide  certain  amount  of 

21  Soldiers  for  the  Shia  and  a  certain  amount  of  Soldiers  for  the  Sunni. 

22  Q.  And  how  many  35  Foxes  were  in  the  S-2  shop? 
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1  A.  There  was  approximately  11.  I  would  say  there  was  probably 

2  not  more  than  four  working  at  one  time  together. 

3  Q.  Can  you  paint  a  picture  for  us  of  what  a  shift  would  look 

4  like  for  35  Fox? 

5  A.  Yes.  Typically  we  go  in  30  minutes  before  the  shift 

6  actually  started  because  we  had  a  shift  change  brief.  During  that 

7  brief,  the  shift  that  was  on  would  give  an  update  on  everything  that 

8  was  happening  from  enemy  position  or  anything  that  commander  put 

9  down  that  we  needed  to  work  on  that  upcoming  shift.  Following  the 

10  shift  change  brief,  the  analyst  would  partner  up  with  their  prior 

11  shift's  partner  and  they  would  go  over  any  products  that  had  not  been 

12  finished  or  any  plans  that  needed  to  be  taken  care  of  during  their 

13  shift  or  any  deficiency  they  had  had  to  include  any  enemy  activity 

14  that  took  place  during  their  shift.  And  then  following  that  partner 

15  up,  the  35  Foxtrot  would  go  ahead  and  start  working  on  whatever 

16  needed  to  be  done,  whether  it  was  a  product  requested  by  an  officer 

17  or  any  kind  of  duties  around  the  office  that  needed  to  be  taken  care 

18  of,  whether  it  was  discarding  classified  information  or  things  like 

19  that. 

20  During  the  shift,  the  12  hour  shift,  they  would  be  released 

21  for  chow  two  times.  Each  chow  break  would  run  approximately  from  30 

22  minutes  to  an  hour.  The  large  majority  of  the  deployment  during  your 

23  shift  you're  also  released  for  PT.  And  then  once  a  week  you  would 


7757 


C 


O 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


have  commando  time,  where  you  would  actually  have  the  whole  shift  off 
for  once  a  week. 

Q.  What  were  the  hours  of  those  shifts? 

A.  The  day  shift  was  1000  to  2200,  night  shift  was  2200  to 

1000  hours. 

Q.  And  you  said  you  would  come  a  half  hour  early? 

A.  Correct. 

MJ:  What  were  the  times  of  those  shifts  again?  I'm  sorry. 

WIT:  1000  to  2200  and  2200  to  1000. 

Q.  Who  was  initially  on  the  night  shift? 

A.  The  night  shift  was  myself,  at  that  time  PFC  Cooley  and  PFC 
Manning. 

Q.  Did  you  have  a  leadership  role? 

A.  I  did. 

Q.  And  what  was  that? 

A.  I  was  the  fusion  night  shift  NCOIC. 

Q.  What  did  that  mean? 

A.  That  meant  that  I  —  any  instructions  that  the  S-2  had  for 

the  night  shift,  I  was  to  facilitate  those  products,  or  any 
activities  that  we  needed  to  complete,  I  was  to  facilitate  the 
completion  of  those  products.  And  then  the  night  shift  NCOIC  was 
responsible  for  doing  assessments  on  a  translated  newspaper  that  was 
full  of  intel  information  from  division. 
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Q.  Who  did  you  supervise  on  that  shift  then? 

A.  I  supervised  PFC  Cooley  and  PFC  Manning. 

Q.  How  long  were  you  on  that  night  shift? 

A.  It  was  approximately  --  approximately  a  month. 

Q.  And  then  what  happened? 

A.  I  was  moved  to  day  shift  working  in  the  targeting  section. 

Q.  What  were  you  doing  in  the  targeting  section? 

A.  I  was  the  targeting  analyst.  I  worked  directly  for  Chief 

Hack. 

Q.  And  you're  still  an  all-source  intel  analyst  in  that 
position? 

A.  Yes. 

Q.  So  what  are  you  doing? 

A.  I  am  still  actually  working  in  the  fusion  cell,  but  I'm 
actually,  instead  of  gathering  a  broad  spectrum  of  information  of  the 
intel  field,  I'm  gathering  information  on  specific  individuals,  and 
then  we  would  take  that  information  and  send  it  to  our  Iraqi 
counterparts  and  help  them  facilitate  missions  to  detain  criminals. 

Q.  Did  you  ever  receive  information  from  the  other  analysts  in 
the  shift? 

A.  It  was  supposed  to  happen  on  an  everyday  basis,  but  rarely 
did  it  happen,  but  there  was  a  couple  of  situations  where  they  did 
communicate  with  the  targeting. 
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Q.  Did  you  ever  receive  any  information  from  PFC  Manning? 

A.  There  was  probably  one  or  two  times  where  I  did. 

Q.  Did  PFC  Manning,  do  you  know,  stay  on  the  night  shift? 

A.  He  did  not  stay  on  the  night  shift.  He  was  eventually  moved 
to  day  shift. 

Q.  Do  you  remember  about  when  that  was? 

A.  I  believe  it  was  —  I  actually  believe  it  was  before 
Christmas,  so  the  December  timeframe. 

Q.  And  then  did  he  move  back  to  day  shift? 

A.  Well,  he  stayed  on  day  shift  and  then  eventually  he  was 

moved  back  to  night  shift. 

Q.  Okay.  So  night  to  day  to  night? 

A.  Uh-huh,  yes. 

Q.  And  when  did  he  move  back  to  night  shift? 

A.  It  was  approximately  the  March-April  timeframe  of  2010. 

Q.  What  were  the  responsibilities  of  the  night  shift  in 
particular? 

A.  The  night  shift's  primary  responsibility  was  to  communicate 
with  the  TOC.  Due  to  the  safety  concerns  of  our  units  on  the  ground 
being  heightened  by  darkness,  they  communicated  with  the  fusion  cell 
more  frequently  to  make  sure  that  any  intel  information  that  had 
occurred  in  specific  locations  prior  to  that  time  that  we  fully 
communicated  with  them.  They  also  monitored  feeds  directly  from 
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1  units  on  the  ground  to  give  them  any  intel  that  they  needed  at  the 

2  time  to  help  facilitate  their  mission,  as  well  as  any  products  that 

3  the  S-2  had  requested  from  them  to  give  to  the  morning  shift  change 

4  brief,  they  had  to  complete  that  as  well. 

5  Q.  How  was  the  day  shift  different? 

6  A.  The  day  shift  was  different  because  there  was  not  as  much 

7  communication  with  the  TOC  due  to  the,  just  the  OPTEMPO,  it  was 

8  definitely  different.  So  the  day  shift,  their  primary  responsibility 

9  was  product  building  for  the  actual  brigade  commander. 


10 

Q. 

And  you  said  before 

there 

was  that 

half  hour  overlap? 

11 

A. 

Correct . 

12 

Q. 

What  happened  during 

that 

half  hour 

overlap? 

13 

A. 

That  was  designated 

for  the  actual 

shift  change  brief, 

14  both  groups  of  analysts  would  come  together,  the  targeting  section 

15  would  come  together,  the  fusion  OIC,  the  fusion  NCOIC  would  all 

16  huddle  around  a  projection  screen  and  we'd  go  over  everything  that 

17  happened  the  shift  before. 

18  Q.  Who  would  go  over  everything? 

19  A.  Each  specific  cell.  So  the  targeting  would  go  over  what 

20  they  had  the  shift  before  and  what  they  need  from  their  counterparts 

21  for  the  next  shift.  The  Shia  group  would  go  over  what  they  had.  The 

22  Sunni  group  would  go  over  what  they  had.  And  then  the  fusion  cell 

23  OIC  would  just  do  a  general  overview  of  everything. 
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Q.  Was  each  analyst  briefing  at  these? 

A.  No. 

Q.  Did  the  analysts  ever  brief? 

A.  Yes. 

Q.  How  often? 

A.  Typically  they  would  take  turns,  so  if  the  officer  —  for 
example,  there  was  an  officer  over  the  Sunni  group,  if  she  wasn't 
briefing  she  would  have  her  35  Foxtrot  analyst  brief,  so  they  kind  of 
flip-flopped. 

Q.  And  you've  talked  some  about  the  work  product  that  35  Foxes 
create,  but  could  you  tell  us  specifically  what  type  of  work 
products? 

A.  Just  very  --The  most  standard  common  work  product  would  be 
a  map  population.  So  we  would  take  raw  information  from  —  whether 
it  was  Iraqi  informants  or  Iraqi  police  or  even  our  units  on  the 
ground,  we  would  populate  the  map  with  whatever  activities  took  place 
on  that  map.  We  would  put  any  pertinent  data  on  an  actual  PowerPoint 
presentation  with  a  picture  of  that  map  and  we  would  put  any 
pertinent  data  to  the  information  that  we  are  identifying,  and  then 
we  would  brief  that. 

Q.  How  did  you  do  that? 
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A.  We  used  the  DCGS  system.  The  DCGS  system,  the  format  has 
got  gigs  full  of  map  information,  and  then  we  would  use  a  PowerPoint 
presentation  program  to  finalize  the  product. 

Q.  Did  you  have  any  training  on  that  DCGS  system? 

A.  Yes. 

Q.  When  was  that? 

A.  That  was  before  we  deployed  in  the  10th  Mountain  Division 
Headquarters . 

Q.  Who  did  that  training? 

A.  It  was  a  civilian  that  went  to  the  T-SCIF  of  division.  I 
don't  recall  her  name,  but  it  was  a  civilian  contractor. 

Q.  But  someone  from  DCGS? 

A.  Yes. 

Q.  What  —  and  when  you're  collecting  that  information  from 
DCGS  and  the  various  databases  on  there,  what  information  were  you 
collecting? 

A.  Typically  we  were  collecting  locational  data  or  specific 
cell  information  from  the  specific  people  groups.  So  we  would  go 
into  different  portals  on  the  SIPRNET,  whether  it  was  division  or 
other  units  that  had  been  in  the  area  before  we  were  there,  if  they 
had  any  pertinent  information  and  we'd  use  query  tree,  we'd  use 
ArcGIS  for  the  mapping  and  thing  like  that.  We  would  just  put 
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together  different  pictures  of  what  we  kind  of  pieced  together  in 
that  specific  area  and  what  the  threat  looks  like. 

Q.  What  type  of  --  what  network  was  that  DCGS  system  on? 

A.  It  was  on  the  SIPR  network. 

Q.  And  up  to  what  classification  level  is  available  on  there? 

A.  The  overall  classification  was  Secret. 

Q.  And  how  did  you  treat  that  material? 

A.  We  treated  it  like  the  sensitive  material  that  it  was. 
Anything  that  entered  the  computer  and  came  out  of  the  computer  was 
therefore  classified  as  Secret. 

Q.  What  if  it  wasn't  marked? 

A.  If  it  wasn't  marked,  it  had  to  be  either  classified  as 
Secret  or  destroyed  immediately. 

Q.  And  why  did  you  do  that? 

A.  We  did  that  because  that's  what  protocol  is  and  that's  what 
I  was  trained  to  do  in  analyst  training  at  Fort  Huachuca,  Arizona. 

Q.  Have  you  had  any  other  training? 

A.  Yes. 

Q.  What  was  that? 

A.  We  --  almost  biannually  you  receive  updated  training  on 
different  protocols  and  things  like  that,  and  every  Soldier  that 
comes  in  the  unit  with  a  Secret  or  a  T  —  or  a  TS  clearance  actually 
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has  to  get  read  on  in  division  headquarters  and  they  are  reminded  of 
safeguarding  information. 

Q.  Do  you  sign  anything? 

A.  Yes. 

Q.  What  do  you  sign? 

A.  Well,  initially  you  sign  a  non-disclosure  agreement  and 
then  you  sign  different  documentation  promising  that  you  will 
safeguard  classified  information. 

ATC [CPT  OVERGAARD] :  One  moment,  please. 

No  further  questions. 

CROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Specialist  Showman,  how  are  you? 

A.  Good,  sir. 

Q.  Ms.  Showman.  I'm  sorry.  Got  used  to  calling  you 
Specialist  Showman. 

I  want  to  start  off  by  asking  you  a  few  questions  about 
work  productivity.  You  talked  about  at  one  point  you  were  Manning's 
supervisor? 

A.  Uh-huh,  yes. 

Q.  And  that  was  his  team  leader,  is  that  correct? 

A.  Team  leader,  yes. 
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l  Q. 

And  as  a  team  leader  you  were  responsible  for  counseling 

2  him? 


3  A. 

Yes. 

4  Q. 

Basically  notifying  him  whenever  he  had  any  deficiency? 

5  A. 

That,  as  well  as  monthly  counselings,  identifying  some  of 

6  the  positive  things  the  Soldier  had  done  in  that  month.  And  then 

7  some  of  the  expectations  for  the  month  following. 

8  Q.  Okay.  And  with  regards  to  counseling,  those  would  be 

9  things  you'd  actually  write  down,  and  you'd  actually  go  over  with  the 
10  Soldier  and  have  them  sign,  correct? 


11  A. 

Yes . 

12  Q. 

When  you  were  first  deployed  as  well  you  were  his 

13  supervisor,  you  were  the  night  shift  supervisor? 


14  A. 

Yes . 

15  Q. 

And  at  that  time  you  were  the  NCOIC? 

16  A. 

Correct . 

17  Q. 

But  you  were  not  an  NCO? 

18  A. 

No. 

19  Q. 

Had  you  gone  to  any  leadership  training  by  that  point? 

20  A. 

No. 

21  Q. 

Do  you  know  why  you  were  given  the  NCOIC  position  even 

22  though  you  were  not  an  NCO? 
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A.  At  that  time  we  only  had,  we  only  had  —  we  only  had  — 
Master  Sergeant  Adkins  was  in  and  out  of  the  FOB  Hammer  and  then  we 
had  one  E5  working  the  day  shift.  Our  other  NCOs  had  not  arrived  by 
that  time. 

Q.  Was  there  ever  an  NCO  put  over  the  night  shift? 

A.  I  do  believe  so,  but  I  couldn't  verify  that.  The  night 
shift  became,  people  were  coming  it  out  of  the  night  shift. 

Q.  And  you  said  that  you  left  the  night  shift  after  about  a 
month? 

A.  Correct. 

Q.  And  that's  when  you  moved  down  to  the  targeting  section 
with  Chief  Hack? 

A.  Yes. 

Q.  So  you  don't  have  any  personal  knowledge  as  to  what  PFC 
Manning  was  assigned  after  you  went  down  to  work  with  Chief  Hack? 

A.  No,  no  personal  knowledge. 

Q.  Now,  you  had  talked  about  PFC  Manning's  work  product. 
Previously  you  had  said  that  he  didn't  have  any  problems  completing 
tasks  when  you  were  his  NCOIC;  is  that  correct? 

A.  Correct. 

Q.  So  he  completed  tasks  in  a  timely  basis? 

A.  Yes. 
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Q.  Now,  you  also  talked  about  some  of  the  conversations  that 
you  had  with  PFC  Manning  before  the  deployment.  Do  you  recall  him 
sometimes  talking  about  politics? 

A.  I  do. 

Q.  And  I  believe  you  said  he  was  very  passionate  about  that? 

A.  Yes. 

Q.  You  also  heard  him  talk  about  government  issues? 

A.  Frequently,  yes. 

Q.  And  he  liked  to  debate  with  others  in  the  SCIF  about  U.S. 
government  policy  and  broad  spectrum  issues? 

A.  Yes. 

Q.  And  you  didn't  engage  in  those  debates  very  much? 

A.  I  did  not. 

Q.  However,  you  would  characterize  PFC  Manning  as  being  very 
political? 

A.  Yes. 

Q.  And  I  think  you  described  him  as  being  on  almost  kind  of 
the  extreme  democratic  side? 

A.  Yes. 

Q.  Now,  PFC  Manning  was  an  all-source  analyst;  is  that  right? 

A.  Yes. 

Q.  And  as  an  all-source  analyst,  you  were  allowed  to  look  at 
anything  on  the  SIPRNET  that  was  not  password  protected? 
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A.  I  wouldn't  —  I  would  not  say  that. 

Q.  Well,  I  want  to  make  sure  we  get  your  testimony  correct 
then.  Did  anyone  put  out  prohibitions  for  what  you  could  not  look  at 
on  the  SIPRNET? 

A.  It  was  your  responsibility  to  look  at  things  that  you  knew 
you  had  access  for.  Just  because  you  have  a  Secret  clearance  doesn't 
mean  you  have  access  —  legal  access  to  visualize  everything,  to  see 
everything  that  has  a  Secret  classification  over  it. 

Q.  Are  you  talking  about  kind  of  like  the  need  to  know  aspect? 

A.  Correct. 

Q.  So  if  you  thought  you  had  a  need  to  know  and  you  had  the 
appropriate  security  clearance,  there  was  nothing  on  the  SIPRNET  that 
you  couldn't  look  at  if  you  thought  you  had  the  need  to  know  about? 

A.  If  the  mission  demanded  it,  possibly. 

Q.  All  right.  And  did  anyone  in  the  S-2  section  ever  put  out 
a  limitation  as  to  a  particular  area  or  site  on  the  SIPRNET  that  you 
should  not  go  to? 

A.  Not  that  I  can  recall. 

Q.  In  addition  to  the  SIPRNET  you  had  what  was  called  a  shared 
drive,  a  T-drive;  is  that  right? 

A.  Yes. 
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Q.  And  no  one  —  did  anyone  in  the  S-2  section  ever  put  out 
any  limitation  as  to  what  you  could  or  could  not  look  at  on  the  T- 
drive? 

A.  No. 

Q.  Was  there  any  training  on  what  you  could  and  could  not  look 
at  on  the  T-drive? 

A.  No. 

Q.  And  with  regards  to  the  T-drive,  my  understanding  was  that 
was  kind  of  a  historical  drive  where  previous  units  would  put  stuff 
as  well? 

A.  I  honestly  do  not  know  where  the  information  came  from  for 
the  T-drive.  I  just  know  that  our  unit  had  control  of  it  during 
deployment . 

Q.  All  right.  You  went  on  the  T-drive? 

A.  Yes. 

Q.  And  you  searched  on  the  T-drive,  correct? 

A.  Yes. 

Q.  And  I  believe  you  found  an  Apache  video  on  the  T-drive;  is 
that  right? 

A.  Yes. 

Q.  And  that  was  the  Apache  video  charged  in  this  case? 

A.  Honestly,  I'm  assuming  so.  I  haven't  seen  what  has  been 

charged  in  this  case. 
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Q.  My  understanding  there  were  quite  a  few  videos  on  the  T- 
drive? 

A.  Yes. 

Q.  And  when  you  found  the  Apache  video  on  the  T  drive,  you  and 
others,  and  I  believe  it  was  Ehresman  —  CW2  Ehresman,  Staff  Sergeant 
Balonek  and  Chief  Hack  were  looking  at  the  video? 

A.  Correct. 

Q.  And  over  the  next  few  days  you  had  discussions  in  the  SCIF 
about  whether  the  video  showed  a  camera  or  an  RPG  being  held  by 
somebody? 


A.  I  wouldn't  say  it  spanned  over  a  few  days;  it  was  mainly 
while  we  were  watching  it. 

Q.  Was  that  only  one  day? 

A.  Yes. 

Q.  Okay.  I'm  sorry.  So  on  that  day  that  you  were  watching  it 
you  had  that  discussion? 

A.  Yes. 

Q.  Did  you  also  debate  whether  the  actions  of  the  Apache  crew 
were  appropriate? 

A.  I  don't  recall  us  debating  about  that. 

Q.  Now,  at  the  time  later  on  did  Captain  Martin  ever  come  in 
and  talk  about  the  video? 
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A.  I  believe  that  Captain  Martin  might  have  been  part  of  the 
group  that  originally  was  watching  it  at  my  computer  station,  but  I 
don't  recall  her  coming  in  and  actually  talking  about  what  we  had 
seen  in  the  video. 

Q.  Okay.  I  now  want  to  ask  a  couple  questions  about  some  of 
the  products  that  you  would  do  as  a  35  Fox,  all  right? 

A.  Okay. 

Q.  You  would,  I  imagine,  take  SIGACTs  and  create  work  products 
for  the  S-2? 

A.  Yes. 

Q.  And  my  understanding  is  PFC  Manning  worked  on  that  Shia 
threat  group  and  so  did  you? 

A.  Actually,  I  did  not.  When  I  was  the  night  NCOIC  I  didn't 
have  a  specific  group  focus.  My  responsibility  actually  wasn't 
either  group.  And  then  when  I  was  in  targeting  I  focused  directly  on 
individuals . 


Q.  All  right.  So  PFC  Manning  worked  on  the  Shia  threat  group, 
correct? 


A.  Correct. 

Q.  And  you  supervised  his  work? 

A.  Yes. 

Q.  Now,  with  regards  to  what  the  night  shift  was  doing, 
correct  me  if  I'm  wrong,  my  understanding  is  sometimes  they  would  get 
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1  names  and  RFIs  and  they'd  —  request  for  information,  and  they'd  get 

2  information  on  those  names? 

3  A.  That's  reasonable,  yes. 

4  Q.  And  they  would  do  that  because  the  night  shift  was  a  good 

5  time  to  do  RFIs  on  names  because  you  didn't  have  a  lot  of 

6  distraction? 

7  A.  That's  fair  to  say,  yes. 

8  Q.  And  PFC  Manning  was  also  tasked  sometime  to  do  statistical 

9  analysis  where  given  a  problem  set  to  go  find  SIGACT  information  on 

10  it  and  put  it  together  in  a  chart  or  something? 

11  A.  Within  the  boundaries  of  our  area  of  operation,  yes. 

12  Q.  With  regard  to  that,  then  when  he  was  done  he  would  have 

13  graphs  or  charts  or  something  to  show  one  of  the  officers? 

14  A.  Correct. 

15  Q.  Now,  the  products  that  PFC  Manning  was  working  on  that  you 

16  were  supervising  during  the  night  shift,  they  weren't  designed  to 

17  give  commanders  real-time  information  on  the  battlefield,  correct? 


18 

A. 

Most 

of 

the 

time,  no. 

19 

Q. 

No. 

In 

fact 

,  they  were  more  kind  of  giving  information  on 

20 

various 

threat 

groups 

and  perhaps  future  issues  we  they  might  be 

21 

dealing 

with? 

22  A.  On  occasion  that  was  requested,  yes. 
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Q.  All  right.  I  now  want  to  ask  you  a  few  questions  about  the 
T-SCIF  operations,  okay? 

A.  Okay. 

Q.  When  you  were  in  the  T-SCIF,  did  you  ever  see  analysts 
listening  to  music? 

A.  Yes. 

Q.  And  was  this  music  ever  listened  to  on  a  DCGS-A  machine? 

A.  Yes. 

Q.  And  where  did  the  music  come  from? 

ATC [CPT  OVERGAARD] :  Objection,  Your  Honor.  Relevance. 

CDC[MR.  COOMBS]:  Your  Honor,  we  believe  this  will  help 
establish  how  the  T-SCIF  was  run,  what  was  allowed  and  what  wasn't 
allowed. 

MJ:  Overruled. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

A.  Can  you  repeat  the  question? 

Q.  Sure.  Where  did  the  music  come  from? 

A.  I  actually  don't  know  where  the  music  came  from.  There  was 
a  large  amount  of  music  on  the  T-drive  that  the  S-6  had  approved  at 
the  time,  so  several  Soldiers  actually  listened  to  music  on  the  T- 
drive . 

Q.  Okay.  Now  I'm  going  to  follow-up  on  what  you  said  there. 
You  believe  the  S-6  approved  it? 
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1  A.  The  S-6  had  control  of  the  T-drive,  so  I  don't  know  where 

2  the  music  came  from  originally,  but  when  we  first  got  into  country 

3  the  music  was  on  the  T-drive. 

4  Q.  Okay.  So  I  just  want  to  make  sure  we  have  your  testimony 

5  right.  Are  you  saying  the  S-6  approved  the  music  or  not? 

6  A.  I  misquoted.  They  never  actually  put  out  a  document  that 

7  says  we  approve  this  music.  My  personal  opinion  is  I  just  assumed 

8  that  they  knew  its  existence. 

9  Q.  Did  you  ever  during  the  time  that  you  were  in  Iraq  ever 

10  hear  from  the  S-6  saying  that  music  was  not  allowed? 

11  A.  Eventually.  Eventually  they  indicated  that  no  outside 

12  sources  would  be  placed  on  the  T-drive  and  that  all  music  would  be 

13  removed  from  the  T-drive. 

14  Q.  You  talked  about  some  of  your  biannual  training,  do  you 

15  remember  that? 

16  A.  Uh-huh. 

17  Q.  From  your  biannual  training,  did  it  ever  teach  you  whether 

18  or  not  music  was  allowed  on  a  SIPRNET  computer? 

19  A.  I  actually  don't  recall  it  being  discussed  specifically  as 

20  music,  no. 

21  Q.  So  you  don't  know  that  answer? 

22  A.  No. 
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Q.  All  right.  What  about  movies?  Did  you  ever  see  movies 
being  played  in  the  T-SCIF? 

A.  Yes. 

Q.  And  what  were  these  movies  being  played  on? 

A.  On  a  NIPRNET  computer,  on  an  unclassified  computer. 

Q.  And  who  brought  in  the  movies? 

A.  Multiple  personnel  brought  in  movies.  I  don't  know 
specifically  who  they  were,  but  it  wasn't  just  one  person. 

Q.  And  were  movies  prohibited  in  the  T-SCIF? 

A.  No. 

Q.  So  they  were  permissible  and  you  could  bring  in  movies? 

A.  Up  until  a  certain  point.  Initially  they  were  allowed  in 
the  T-SCIF. 

Q.  And  you  said  that  up  to  a  certain  point.  When  were  they  not 
allowed? 

A.  When  the  brigade  commander  said  no  external  media  anywhere 
around  any  computers.  At  that  point  all  movies  that  had  been  brought 
into  the  T-SCIF  were  destroyed. 

Q.  And  when  was  that? 

A.  That  was  approximately  I  would  say  February  of  2010, 
February,  March  timeframe.  I  don't  know  the  exact  date. 

Q.  Were  analysts  allowed  to  play  games  on  their  DCGS  machines? 
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1  A.  There  were  games  on  the  T-drive,  so  games  that  were  on 

2  there  and  analysts  had  played  them. 

3  Q.  When  I'm  speaking  of  games,  it's  actually  kind  of  a  video 

4  game  that  you  play  on  the  computer,  right? 

5  A.  Yes. 

6  Q.  And  I  believe  one  of  them  was  Zooma,  do  you  remember  that? 

7  A.  It  was  a  ball,  a  little  ball  popping  game.  Yeah,  I  don't 

8  remember  the  name. 

9  Q.  And  were  games  allowed  on  a  SIPRNET  computer? 

10  A.  It  was  never  announced  that  you  could  play  them.  They 

11  actually  discouraged  any  type  of  playing  of  games  during  mission 

12  hours,  but  at  that  time  I  think  we  were  under  the  impression  the  S-6 

13  was  aware  of  them  and  —  I  mean  it  was  never  declared  that,  yes,  you 


14 

can  play 

these  games. 

15 

Q. 

And  if  you  can' 

1 1 

tell  me  if  you 

have  the  computer  knowledge 

16 

for  this 

,  just  say  I  don' 

1 1 

know  this,  but 

do  you  know  if 

games  —  the 

17 

video  games  being  played 

were  executable 

files? 

18 

A. 

No  idea. 

19 

Q. 

Do  you  know  what 

that  term  means? 

20 

A. 

No. 

21 

Q. 

So  with  regard 

to  other  things. 

mIRC  chat,  did 

you  ever 

22 

hear  of 

that? 

23 

A. 

Yes . 
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1  Q.  And  do  you  know  how  —  first  of  all,  did  you  have  that  on 

2  your  computer? 

3  A.  Yes. 

4  Q.  And  did  analysts  need  mIRC  chat? 

5  A.  Yes. 

6  Q.  And  what  would  you  use  mIRC  chat  for? 

7  A.  We  used  it  primarily  to  communicate  with  other  units  to 

8  include  division,  that  was  division's  primary  form  of  communication, 

9  and  in  order  to  communicate  with  our  division  counterparts  we  needed 


10 

mIRC  chat. 

11 

Q. 

And 

mIRC  chat  was 

on  your  desktop,  right? 

12 

A. 

Yes . 

13 

Q. 

And 

then  you  would 

double-click  it? 

14 

A. 

I  don't  remember, 

but  we  would  open  it 

somehow 

15 

Q. 

All 

right.  So  you 

would,  obviously  you' 

'd  click 

16 

some  point? 

17 

A. 

Yes. 

18 

Q. 

And 

it  would  open? 

19 

A. 

Yes. 

20 

Q. 

And 

mIRC  chat  got 

in  your  computer  not 

by  Mr.  I 

21 

correct? 

22 

A. 

No. 

23 

Q. 

PFC 

Manning  put  it 

on  your  computer? 
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1  A.  Correct. 

2  Q.  And  at  the  time  that  PFC  Manning  put  that  on  your  computer, 

3  were  you  his  supervisor? 

4  A.  No. 

5  Q.  What  was  your  work  relationship  with  him  at  that  point? 

6  A.  He  was  working,  I  believe  he  was  working  day  shift  and  I 

7  did  not  have  the  knowledge  base  to  put  mIRC  chat  on  my  computer  and  I 

8  knew  I  needed  it  on  my  computer,  so  I  went  to  the  one  guy  I  knew  that 

9  had  extensive  computer  knowledge  and  that  was  Manning  on  the  shift  at 


10 

that  time. 

11 

Q.  And 

at  the  time  that 

Manning, 

PFC  Manning  put  mIRC  chat  on 

12 

your  computer, 

did  you  believe 

that  that 

was  against  the  user 

13 

agreement? 

14 

A.  No. 

15 

Q.  Why 

not? 

16  A.  It  was  never  informed  to  me  that  it  was  against  the  user 

17  agreement,  and  I  knew  that  it  had  been  put  out  that  we  needed  it  on 

18  all  of  our  computers  to  communicate  throughout  the  brigade  and 

19  division. 

20  Q.  My  understanding  is  the  DCGS-A  computers  were  being  worked 

21  on  by  just  Mr.  Millman? 

22  A.  Correct. 
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Q.  So  that  was  the  person  that  was  authorized  to  work  on  those 
computers,  right? 

A.  Yes. 

Q.  And  yet  you  went  to  PFC  Manning? 

A.  Mr.  Millman  was  not  there,  and  I  wouldn't  call  it  working 

on  my  computer  to  put  a  program  on  my  desktop,  but,  yes,  I  went  to 
PFC  Manning. 

Q.  Okay.  Now,  you  also  talked  about  on  direct  that,  I  believe 
you  said  that  Manning  told  you  at  one  point  he  could  get  around 
passwords  pretty  easily? 

A.  Yes. 

Q.  What  passwords  were  you  talking  about? 

A.  Different  portal  passwords  on  the  SIPRNET  network. 

Q.  All  right.  And  when  he  said  that  to  you,  did  you  —  what 
was  your  work  relationship  with  him  then? 

A.  I  do  not  —  I  actually  don't  remember  whether  I  was  working 
day  shift  or  actually  working  night  shift  with  him.  I  don't  remember 
what  my  work  relationship  with  him  was  at  that  time. 

Q.  I'm  sorry.  I  might  have  misunderstood.  I  thought  you  said 
he  told  you  that  when  you  were  still  at  Fort  Drum. 

A.  No.  It  was  in  theatre. 

Q.  Oh,  it  was  in  theater  he  told  you  he  could  get  around 
passwords? 
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1  A.  Yes.  Yes. 

2  Q.  So  at  that  point  did  you  counsel  him? 

3  A.  No.  He  was  at  that  —  if  I  was  not  the  night  NCOIC,  he  was 

4  no  longer  my  Soldier  and  no  longer  my  responsibility  to  counsel.  I 

5  was  not  the  only  person  standing  around  when  he  said  that. 

6  Q.  Did  anyone  say,  wait  a  second,  that's  against  the  AUP? 

7  A.  I  actually  don't  remember. 

8  Q.  Did  anyone  say  anything  in  response  to  Manning  saying,  "I 

9  could  get  around  that  password?" 

10  A.  I  believe  that  there  was  discussion.  I  don't  know  matter 

11  of  fact. 

12  Q.  Okay.  Now,  you  talked  about  the  biannual  training  that  you 

13  got.  Can  you  tell  us  about  that  a  little  bit  more?  What  was  that 

14  training  that  you  got? 

15  A.  Typically  it  was  computer  based  training,  so  you  were 

16  required  by  S-6  to  update  this  training,  and  what  this  training  was 

17  is  it  was  kind  of  just  a  compilation  of  different  information  on  how 

18  to  safeguard  information,  how  to  prevent  hackers  from  accessing 

19  different  computer  systems  and  things  like  that.  Primarily  the 

20  foundation  of  this  training  was  to  ensure  that  any  classified 

21  information  wasn't  reaching  parties  that  it  should  not  have  been 

22  reaching  and  that  you  were  not  being  —  that  you  were  safeguarding 

23  your  information  on  these  computer  systems. 
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1  Q.  All  right.  Have  you  taught  this  training? 

2  A.  It  was  on  the  —  we  had  to  —  it  was  on  the  computer,  so 

3  I'm  assuming  the  actual  Army. 

4  Q.  All  right.  So  you're  talking  about  the  standard  training 

5  that  people  have  to  complete  in  order  to  keep  their  access  to 

6  computers? 

7  A.  Yes. 

8  Q.  So  we ' re  not  talking  about  an  actual  somebody  coming  down 

9  and  training  you? 

10  A.  No. 

11  Q.  Okay.  Ms.  Showman,  I  want  to  thank  you.  I  don't  believe  I 

12  have  any  more  questions  for  you. 

13  A.  Okay. 

14  MJ:  Redirect? 

15  ATCfCPT  OVERGAARD] :  Yes,  ma'am. 

16  REDIRECT  EXAMINATION 

17  Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

18  Q.  On  cross  you  said  that  PFC  Manning  talked  to  you  about 

19  politics. 

20  A.  Uh-huh. 

21  Q.  And  then  on  direct  you  said  he  talked  about  computers  and 

22  what  else  did  you  say  he  talked  about? 
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A.  He  talked  about  social  events,  martini  parties  and 
shopping,  things  like  that. 

Q.  Did  he  ever  talk  about  the  Internet? 

A.  Yes. 

Q.  And  what  did  he  talk  about? 

A.  He  actually  told  me,  the  first  conversation  we  had  driving 
in  my  car.  He  told  me  that  he  had  to  make  sure  that  he  scrubbed  the 
entire  Internet  of  anything  that  involved  him  otherwise  he  would  not 
be  able  to  receive  a  security  clearance  and  join  the  military. 

CDC [MR.  COOMBS]:  Your  Honor,  I'd  object.  Relevance. 

MJ:  What  is  the  relevance? 

ATC [OPT  OVERGAARD] :  One  moment,  please. 

MJ:  Are  you  going  into  uncharged  misconduct? 

ATC [CPT  OVERGAARD]:  No,  ma'am.  That's  the  extent  of  the 
question . 

MJ:  All  right.  I'll  disregard  it.  Go  ahead. 

ATC [CPT  OVERGAARD]:  One  moment,  please,  ma'am. 

MJ:  That  would  be  sustaining  the  objection. 

ATC [CPT  OVERGAARD]:  Ma'am,  if  I  may  state  a  basis  for  relevance. 

MJ:  Go  ahead. 

ATC [CPT  OVERGAARD]:  Spec  1,  Charge  II,  the  wanton  disregard,  I'm 
required  to  show  --  or  we're  required  --  sorry,  ma'am  —  that  there's 
a  wanton  disregard,  and  the  knowledge  of  the  Internet  in  general  goes 
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1  directly  to  that,  whether  or  not  he  knew  he  wantonly  and  wrongfully 

2  disregarded  when  he  published  things  on  the  Internet. 

3  MJ:  So  the  relevance  is  his  knowledge  about  the  Internet? 

4  ATC [CPT  OVERGAARD] :  Yes,  ma'am.  Knowledge  of  the  Internet. 


5 

MJ: 

I'll  consider  it  for  that  purpose. 

6 

ATC [CPT  OVERGAARD]:  Okay,  ma'am. 

7 

Questions 

continued  by  the  assistant  trial  counsel 

[CPT  OVERGAARD] 

8 

Q. 

So,  again,  he  talked  about  his  presence 

on  the  Internet? 

9 

A. 

Yes . 

10 

Q. 

You  mentioned  the  Apache  video  on  cross 

as  well. 

11 

A. 

Yes . 

12 

Q. 

When  did  you  first  see  that? 

13  A.  I  don't  remember  the  timeline,  but  I  was  working  directly 

14  for  Chief  Hack  as  the  targeting  analyst. 

15  Q.  And  why  did  you  watch  it? 

16  A.  Chief  Hack  was  grooming  me  to  work  as  his  targeting  analyst 

17  for  future  deployments  and  he  was  explaining  different  weapon 

18  systems.  We  watched  other  videos  involving  different  weapons  systems, 

19  so  he  was  talking  to  me  about  the  process  of  communication  with  an 

20  airplane  like  that  and  how  you  would  complete  a  mission. 


21 

Q. 

So  it  was 

for  an  official  purpose? 

22 

A. 

Yes . 

23 

Q. 

Where  was 

that  located? 
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A.  It  was  located  on  the  T-drive. 

Q.  And  where  is  the  T-drive? 

A.  It's  —  I  actually  don't  know  how  to  explain  it.  It's  just 
a  drive  that  the  S-6  controls,  so  you  can  access  it  through  my 
computer  on  your  Secret  system. 

Q.  It's  on  the  Secret  system? 

A.  Yes. 

ATC[CPT  OVERGAARD] :  One  moment,  please.  No  further  questions. 
MJ:  All  right. 

CDC [MR.  COOMBS]:  Nothing,  ma'am. 

MJ:  Temporary  or  permanent  excusal? 

ATC [CPT  OVERGAARD]:  Temporary,  ma'am. 

[The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 
the  courtroom . ] 

TC [MAJ  FEIN]:  And  the  United  States  requests  a  brief  comfort 
break. 

MJ:  Ten  minutes  sufficient? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Court  is  in  recess  until  10:30. 

[The  court-martial  recessed  at  1025,  5  June  2013.] 

[The  court-martial  was  called  to  order  at  1039,  5  June  2013.] 
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M J :  Court  is  called  to  order.  Let  the  record  reflect  all 
parties  present  when  the  Court  last  recessed  are  again  present  in 
court . 

Is  the  government  ready  to  proceed? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

United  States  calls  Chief  Warrant  Officer  2  Kyle  Balonek. 

CHIEF  WARRANT  OFFICER  2  KYLE  BALONEK,  U.S.  Army,  was  called  as  a 
witness  for  the  government,  was  sworn  and  testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  And  you  are  Chief  Warrant  Officer  2  Kyle  Balonek  of  the 
10th  Mountain  Division,  G2? 

A.  Yes,  sir. 

Q.  Chief  Balonek,  how  do  you  know  Private  First  Class  Bradley 
Manning? 

A.  He  worked  with  us  in  the  S-2  section  of  the  2nd  Brigade, 
10th  Mountain,  sir. 

Q.  When  was  that? 

A.  From  2008  to  2010,  sir. 

Q.  And  what  is  your  current  MOS  or  officer  specialty? 

A.  I'm  a  350  fox  and  all-source  intelligence  technician. 

Q.  And  that  is  a  warrant  officer? 

A.  Yes,  sir. 
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Q.  How  long  have  you  been  in  the  military? 

A.  Since  July  of  2002. 

Q.  Has  that  been  in  the  United  States  Army  the  whole  time? 

A.  Yes,  sir. 

Q.  And  what  was  your  original  MOS  in  the  Army? 

A.  My  original  MOS  was  a  31  Romeo,  multi-channel  transmissions 
system  operator. 

Q.  What  is  that? 

A.  It's  a  radio  operator  in  the  signal  corps,  sir. 

Q.  Okay.  So  you  were  a  signal  Soldier? 

A.  Yes,  sir. 

Q.  When  did  you  become  a  35  Fox? 

A.  In  2006,  September. 

Q.  And  when  did  you  go  to  AIT? 

A.  From  May  to  September  of  2006. 

Q.  And  since  I  mentioned  35  Fox,  what  is  a  35  Fox? 

A.  An  all  source  intelligence  analyst. 

Q.  And  what  does  an  all-source  intelligence  analyst  do? 

CDC [MR .  COOMBS]:  Objection. 

A.  All  source  brings  together  - 

MJ:  Hold  on  just  a  moment.  Yes? 

CDC [MR.  COOMBS]:  This  is  cumulative.  Your  Honor. 
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1  TC [MAJ  FEIN]:  Your  Honor,  just  to  establish  foundation  for  a 

2  - 

3  MJ:  A  little.  I'll  allow  a  little  leeway.  We've  heard  it 

4  before. 

5  TC [MAJ  FEIN]:  Yes,  ma'am. 

6  Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

7  Q.  Could  you  please  answer  the  question?  What  does  an  all- 

8  source  intelligence  analyst  do? 

9  A.  Yes,  sir.  An  all-source  analyst  brings  in  information  from 

10  various  sources,  whether  it  was  HUMINT,  SIGINT  or  GEOINT  and  makes  it 

11  into  one  complete  product  to  be  presented  to  the  consumer,  whether  it 

12  be  the  commander  or  subordinate  units. 

13  Q.  And  what  type  of  training  did  you  receive  to  become  a 

14  warrant  officer  in  this  field? 

15  A.  Received  training  from  information  security  to  DCGS 

16  training  to  pattern  and  trend  analysis  to  data  mining,  and  you  work 

17  on  your  briefing  skills  as  well,  sir. 

18  Q.  Is  that  as  a  35  Fox  or  as  a  350  Alpha? 

19  A.  They're  both  very  similar,  sir. 

20  Q.  And  what  formal  training  did  you  attend  as  an  enlisted 

21  Soldier? 
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1  A.  I  attended  a  basic  AIT  course,  35  Fox,  the  BNCOC  course,  I 

2  also  took  the  tactical  S-2  course  and  I  attended  Intelligence  Master 

3  Analyst  course. 

4  Q.  When  did  you  attend  the  Intelligence  Master  Analyst  course? 

5  A.  From  July  to  September  of  2009. 

6  Q.  And  very  short,  what  was  the  purpose  of  that  training? 

7  A.  Focused  on  analytical  theories,  a  lot  of  DCGS  training 

8  still.  We  worked  briefing  and  presentation  skills  and  we  had  some 

9  briefings  from  higher  level  agencies  in  other  areas  that  could  assist 

10  us  in  our  analysis. 

11  Q.  What  was  your  last  rank  as  an  enlisted  Soldier? 

12  A.  I  was  a  staff  sergeant  promotable. 

13  Q.  And  for  how  long  were  you  an  NCO? 

14  A.  From  September  of  '04  until  August  of  2010. 

15  Q.  And  what  happened  in  August  2010? 

16  A.  I  was  appointed  as  a  W01  in  the  United  States  Army,  sir. 

17  Q.  Do  you  have  any  education  outside  of  the  military? 


18 

19 


A.  I  have  an  associate's  degree  in  business  administration. 


20 

Q. 

And  have  you  deployed  before? 

21 

A. 

Yes,  sir. 

22 

Q. 

How  many  times? 

23 

A. 

Four  times,  sir. 
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1  Q.  And  could  you  briefly  describe  the  general  nature  of  those 

2  deployments  for  the  court? 

3  A.  My  first  two  deployments  from  '03  to  '04  was  with  the  4- 

4  40th  Signal  Battalion,  mainly  worked  as  a  transmission  team  member 

5  doing  line  of  sight  communication. 

6  From  2005  to  2006,  I  was  still  with  the  4-40th.  I  worked  in 

7  the  company  orderly  at  that  point.  From  2006  to  2007,  I  worked  in 

8  the  2nd  Brigade,  10th  Mountain  Division  as  an  all  source  analyst. 

9  And  again  from  09'  to  10'  as  an  all-source  intelligence  analyst. 

10  Q.  When  did  you  first  arrive  to  Fort  Drum? 

11  A.  October  of  2006,  sir. 

12  Q.  And  what  was  your  —  when  to  the  best  of  your  memory  did 

13  PFC  Manning  arrive  at  the  Fort  Drum? 

14  A.  It  was  late  2008,  possibly  September,  sir. 

15  Q.  And  you  just  testified  about  going  on  your  first  deployment 

16  with  the  10th  Mountain  Division.  When  did  that  deployment  end? 

17  A.  Late  2007,  October. 

18  Q.  So  what  did  you  do  between  --  what  was  your  job  or  your 

19  duty  responsibilities  between  late  October  2007,  and  until  PFC 

20  Manning  arrived? 

21  A.  My  primary  responsibility  was  personnel  security. 

22  Q.  And  what  was  it  to  be  the  personnel  security  manager,  what 

23  did  that  mean? 


7790 


© 


o 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


A.  An  additional  duty  appointed  by  the  commander  that  I  was  to 
assist  all  of  the  personnel  in  the  brigade  headquarters  with  their 
security  clearance,  their  periodic  investigations,  any  questions  they 
had,  non-disclosure  agreements  and  JPAS,  JPAS  —  monitoring  their 
JPAS  account . 

Q.  And  what  is  JPAS? 

A.  JPAS  is  the  Joint  Personnel  Adjudication  System,  sir. 

Q.  As  what's  it  used  for? 

A.  It's  used  to  pull  up  individual's  information  showing  when 

their  clearance  began,  ended  and  when  they  were  granted  a  clearance. 

Q.  So  as  the  personnel  security  manager,  what,  when  a  --  let 
me  rephrase  this.  When  a  Soldier  arrived  to  the  unit,  which  unit 
were  you  the  personnel  security  manager  for? 

A.  For  brigade  headquarters,  sir. 

Q.  So  that's  for  2-10  Mountain  Brigade  Headquarters? 

A.  Yes,  sir. 

Q.  So  when  a  new  Soldier  arrived,  what  was  your  personnel 

responsibility  for  their  Soldiers? 

A.  To  pull  them  up  in  JPAS,  verify  if  they  have  a  clearance  or 
not,  own  them  in  JPAS,  which  is  taking  their  profile  and  basically 
tagging  it  to  our  organization  and  having  them  sign  the  non¬ 
disclosure  agreement  that  grants  them  local  access  to  classified 
information. 
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1  Q.  And  what's  required  in  order  to  have  access  to  classified 

2  information? 

3  A.  To  have  a  clearance  for  one,  to  have  a  need  to  know  and  to 

4  have  signed  that  non-disclosure  agreement. 

5  Q.  And  how  does  one  obtain  a  clearance? 

6  A.  Through  filling  out  the  SF  86,  saying  that  you  —  so  that 

7  you  have  an  investigation  done  from  the  Office  of  Personnel 

8  Management  and  have  the  clearance  verified  and  granted  by  Army 

9  Central  Clearance  Facility. 

10  Q.  And  what  is  an  SF  8  6? 

11  A.  It ' s  a  standard  form.  It  basically  goes  into  your 

12  background,  personal  information,  where  you've  lived,  where  you've 

13  worked,  who  you  know,  who  your  family  is,  who  your  acquaintances  and 

14  friends  are. 

15  Q.  So  when  a  Soldier  arrives  to  --  at  least  when  you  were  the 

16  personnel  security  manager  for  the  brigade  staff,  when  a  new  Soldier 

17  arrived  at  2-10  Mountain,  after  you  verified  they  had  an  appropriate 

18  security  clearance  granted,  what  occurred,  what  were  you  still 

19  responsible  for? 

20  A.  To  maintain  and  monitor  their  clearance  status.  If  it 

21  expired  they  needed  to  do  periodic  reinvestigation  that  required 

22  access  to  the  forms. 
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1  Q.  And  you  also  testified  a  moment  ago  about  a  non-disclosure 

2  agreement.  What  is  a  non-disclosure  agreement? 

3  A.  A  non-disclosure  agreement  is  a  piece  of  paper  that  states 

4  how  you  will  handle  the  classified  material,  who  it  belongs  to  and 

5  what  could  happen  to  you  if  it's  disclosed  to  unauthorized  sources. 

6  Q.  Does  it  have  a  standard  form  number? 

7  A.  It's  a  Standard  Form  312,  sir. 

8  Q.  And  what  was  your  normal  procedure  when  a  Soldier  arrived 

9  in  order  to  verify  that  they  had  a  SF  312  non-disclosure  agreement  on 

10  file? 

11  A.  When  a  Soldier  in  in-processed,  I  give  them  the  NDA,  they 

12  were  to  read  the  document  in  full.  I  would  give  a  brief  synopsis  of 

13  some  of  the  key  points.  Once  they're  completed  and  had  no  questions, 

14  they  would  sign  the  agreement  and  it  was  filed  with  all  the  other 

15  non-disclosure  agreements. 

16  Q.  Now,  does  a  35  Fox  require  security  clearance? 

17  A.  Yes,  sir. 

18  Q.  And  does  a  35  Fox  typically  sign  a  non-disclosure  agreement 

19  upon  entering  the  Army  or  AIT? 

20  A.  Yes,  sir. 

21  Q.  So  why  would  one  have  to  also  fill  out  another  non- 

22  disclosure  agreement  when  they  show  up  to  the  unit? 
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1  A.  Sir,  the  non-disclosure  agreement  is  generally  for  that 

2  particular  unit.  I  myself  have  signed  seven,  sir. 


3  Q. 

Seven  in  how  many  years? 

4  A. 

Eleven  years,  sir. 

5  Q. 

And  that  procedure  you  just  discussed,  what  was  your  role 

6  after  you  briefed  the  Soldiers  about  the  non-disclosure  agreement? 


7  A. 

Was  to  keep  that  paperwork  on  file,  sir. 

00 

O 

Did  you  have  a  direct  role  on  the  actual  form? 

9  A. 

No,  sir.  I  did  have  to  witness  and  sign  that  they  did 

10  verify  the  information  and  signed  it  themselves. 

11  Q.  And  did  you  ever  sign  as  a  witness  an  NDA  that  you  did  not 

12  see  someone  sign? 


13  A. 

No. 

14  Q. 

Do  you  remember  Private  First  Class  Manning's  non- 

15  disclosure  agreement,  the  one  he  signed? 


16  A. 

Yes,  sir. 

17  Q. 

And  did  you  —  did  Private  First  Class  Manning,  while  at  2 

18  10  Mountain,  have  access  to  Secret  information? 


19  A. 

Yes,  sir. 

20  Q. 

Did  he  have  access  to  Top  Secret  information? 

21  A. 

No,  sir. 

22  Q. 

But  I  thought  most  35  Foxes  had  Top  Secret  security 

23  clearance? 
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1  A.  Yes,  they  had  the  clearance,  yes,  sir. 

2  Q.  Why  would  Private  First  Class  Manning  not  have  access  to 

3  Top  Secret  information? 

4  A.  Our  Top  Secret  access  is  for  when  it's  needed  to  know.  At 

5  that  time  in  our  building  we  had  no  JWICS  terminals. 

6  Q.  Just  jumping  ahead  to  deployed,  how  much  access  did  you 

7  have  to  Top  Secret  SCI  information  while  deployed  in  the  SCIF? 

8  A.  Very  little.  Only  on  a  need  basis  when  it  came  from  that 

9  particular  cell  in  our  office. 

10  Q.  Did  you  have  readily  available  —  could  you  get  to  a 

11  computer  system  to  pull  the  information? 

12  A.  No,  sir. 

13  CDC [MR .  COOMBS]:  Objection,  Your  Honor.  Relevance.  He's  not 

14  charged  with  anything  that's  Top  Secret. 

15  MJ:  Relevance? 

16  TC [MAJ  FEIN]:  Your  Honor,  the  defense  has  actually  established 

17  relevance  with  previous  witnesses,  having  witnesses  testify  about 

18  that  Private  First  Class  Manning  had  other  access  to  the  information, 

19  to  other  classified  information,  so  I'm  just  having  Chief  Balonek 

20  explain  to  the  Court  about  the  procedures  down  range  on  access  to 

21  classified  information  and  what  type  there  is  and  isn't. 

22  MJ:  All  right.  Overruled. 

23  Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 
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Q.  So  did  you  have  direct  access  to  Top  Secret  SCI 
information? 

A.  No,  sir. 

Q.  And  then  when  you  did  get  access,  was  it  on  a  read  and 
return  basis? 

A.  Yes,  sir. 

Q.  Explain  please  for  the  Court  what  that  means. 

A.  Read  and  return,  ma'am,  would  be  you  had  a  cell  that  had 
the  access,  they  would  either  print  this  information  or  let  us  view 
it  on  their  computer  screen,  and  that  information  had  remained  in 
their  secure  area. 

Q.  And  was  that  true  for  Private  First  Class  Manning  and  the 
other  analysts? 

A.  Yes,  sir. 

Q.  What  paperwork  --  Going  back  to  Fort  Drum,  what  paperwork 
did  Private  First  Class  Manning  need  to  complete  in  order  to  receive 
access  to  any  of  the  classified  information? 

A.  Aside  from  the  non-disclosure  agreement,  sir? 

Q.  So  a  non-disclosure  agreement? 

A.  Yes,  sir. 

Q.  Did  PFC  Manning  complete  that  non-disclosure  agreement? 

A.  Yes,  sir. 
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1  TC [MAJ  FEIN]:  Your  Honor,  I  am  retrieving  what  has  been  marked 

2  as  Prosecution  Exhibit  60  for  Identification  [retrieving  P  60  for  ID 

3  from  the  court  reporter.] 

4  Your  Honor,  I'm  handing  the  witness  Prosecution  Exhibit  60 

5  for  Identification  [handing  PE  60  for  ID  to  the  witness] . 

6  Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 


7 

Q. 

Chief  Balonek,  do  you  recognize  this  document? 

8 

A. 

Yes,  sir. 

9 

Q. 

What  is  this  document? 

10 

A. 

It  is  the  classified  information  non-disclosure  agreement. 

11 

Q. 

How  do  you  recognize  this  document? 

12 

A. 

It  states  it  on  the  top,  sir,  and  I've  used  the  form  for  a 

13 

few  years 

14 

Q. 

And  what  is  the  date  of  this  non-disclosure  agreement? 

15 

A. 

Sir,  the  date  is  17  September  2008. 

16 

Q. 

Whose  name  is  on  the  top  of  this  non-disclosure  agreement? 

17 

A. 

It's  Manning,  Bradley. 

18 

Q. 

Who  wrote  that  name  on  the  top  of  the  non-disclosure 

19 

agreement 

? 

20 

A. 

I  did,  sir. 

21 

Q. 

How  do  you  know  that? 

22 

A. 

It's  my  handwriting. 
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1  Q.  And  if  you  could  please  flip  to  page  two,  is  that  your 

2  signature  as  a  witness  signing  that  non-disclosure  agreement? 

3  A.  Yes,  sir. 

4  TC [MAJ  FEIN]:  Your  Honor,  the  United  States  offers  Prosecution 

5  Exhibit  60  for  Identification  into  evidence  as  Prosecution  Exhibit 

6  60. 

7  CDC [MR.  COOMBS]:  No  objection. 

8  MJ:  May  I  see  it,  please? 

9  [PE  60  for  ID  was  handed  to  the  military  judge.] 

10  MJ:  Prosecution  Exhibit  60  for  Identification  is  admitted. 

11  TC [MAJ  FEIN]:  Your  Honor,  the  United  States  reguest  permission 

12  to  publish  Prosecution  Exhibit  60. 

13  M  J :  Proceed. 

14  [PE  60  was  published  to  the  Court.] 

15  Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 


16 

Q. 

Chief 

Balonek,  is  your 

screen  working? 

17 

A. 

Yes, 

sir . 

18 

Q. 

Now, 

Chief  Balonek,  you 

just  testified  that  before  a 

19  Soldier  who  in-processed  in  your  subsection  in  S-2  Personnel  Security 

20  that  you  would  go  over  the  non-disclosure  agreement  with  that 

21  Soldier? 

22  A.  Yes,  sir. 
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1  Q.  Would  you  please  explain  the  top  part  of  this  and  what  you 

2  would  explain  to  each  Soldier  as  they  in-processed,  specifically 

3  Private  First  Class  Manning?  At  the  very  top,  what  would  you 

4  describe? 

5  A.  First  paragraph,  sir? 

6  Q.  Yes. 

7  A.  Starting  at  the  top,  it's  stated  it's  an  agreement  between 

8  individual  and  the  United  States  pertaining  to  the  classified 

9  information  and  for  release  and  handling  of  it. 

10  Q.  And  then  if  you  look  at  the  last  sentence  in  paragraph  one, 

11  could  you  please  read  that  for  the  Court? 

12  A.  Yes,  sir.  It  says  I  understand  and  accept  that  by  being 

13  granted  access  to  special  information,  special  confidence  and  trust 

14  shall  be  placed  in  my  by  the  United  States  government. 

15  Q.  And  what  did  you  explain  to  individuals,  specifically  PFC 

16  Manning,  about  that  sentence? 

17  A.  That  this  is  just  what  it  reads,  sir,  that  it's  the  trust 

18  being  placed  upon  you  to  handle  it  properly. 

19  Q.  Okay.  Could  you  please  read  the  first  sentence  of 

20  paragraph  three? 

21  A.  Yes,  sir.  It  says  I  have  been  advised  that  the 

22  unauthorized  disclosure,  unauthorized  retention  or  negligent  handling 

23  of  classified  information  by  me  could  cause  damage  or  irreparable 
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1  injury  to  the  United  States  or  could  be  used  to  advantage  by  a 

2  foreign  nation. 

3  Q.  Now,  what  did  you  explain  about  that  sentence  to  each 

4  individual? 

5  A.  I  would  explain  that  the  information  that  we  carry  is, 

6  needs  to  be  handled  properly  so  it  doesn't  fall  into  the  wrong  hands 

7  of  any  enemy  element  or  others  that  would  do  harm  to  the  United 

8  States. 

9  Q.  And  could  you  read  the  next  sentence,  sentence  two  of 

10  paragraph  three,  please? 

11  A.  I  hereby  agree  that  I  will  never  divulge  classified 

12  information  to  anyone  else  unless: 

13  A.  I  have  officially  verified  that  the  recipient  has  been 

14  properly  authorized  by  the  United  States  government  to  receive  it, 

15  or, 

16  B.  I  have  been  given  prior  written  notice  of 

17  authorization  from  the  United  States  government,  department  or 

18  agency,  hereinafter  department  or  agency  responsible  for  the 

19  classification  of  the  information  or  last  granting  me  a  security 

20  clearance  that  such  disclosure  is  permitted. 

21  Q.  How  did  you  explain  that  paragraph  to  each  person  in 

22  processed  in  your  section? 
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1  A.  I  would  generally  go  over  if  a  person  didn't  have  the  need 

2  to  know  the  information  or  if  they  were  not  authorized  to  receive  it, 

3  that  it  remained  where  it  was. 

4  Q.  What  do  you  mean  by  where  it  was? 

5  A.  It  would  remain  in  our  office  or  in  our  custody. 

6  Q.  Okay.  And  what  about  the  first  sentence  in  paragraph  four, 

7  would  you  please  read  that? 

8  A.  I  have  been  advised  that  any  breach  of  this  agreement  may 

9  result  in  the  termination  of  any  security  clearances  I  hold,  removal 

10  from  my  position  of  special  confidence  or  trust  requiring  such 

11  clearances  or  the  termination  of  my  employment  or  other  relationships 

12  with  the  department  or  agencies  that  granted  my  security  clearance  or 

13  clearances. 

14  Q.  And  what  did  you  explain  to  each  Soldier  that  in-processed 

15  about  that  sentence? 

16  A.  In  easy  terms  that  if  you  do  divulge  classified  information 

17  to  unauthorized  sources,  you  will  lose  your  clearance  and  you  will  be 

18  in  trouble. 

19  Q.  Okay.  And  then  could  you  go  to  the  third  sentence  or,  I'm 

20  sorry,  the  next  sentence  in  paragraph  four? 

21  A.  In  addition,  I  have  been  advised  that  any  unauthorized 

22  disclosure  of  classified  information  by  me  would  constitute  a 

23  violation  or  violations  of  United  States  criminal  laws  including  the 
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provisions  of  Section  641,  793,  794,  798,  952  1924  Title  18  United 
States  Code. 

Q.  And  then  what  did  you,  how  did  you  describe  that  sentence 
to  individuals  who  in-processed  your  section? 

A.  The  same  as  before,  sir.  I  kept  it  very  basic.  Just  like 
if  you  do  this,  you  will  lose  clearance  and  be  in  trouble. 

Q.  And  what  do  you  mean  by  in  trouble? 

A.  You  will  most  likely  be  arrested. 

Q.  And  what  about  the  first  sentence  in  paragraph  seven? 

A.  States  that  I  understand  that  all  classified  information  to 
which  I  have  access  to  or  may  obtain  access  by  signing  this  agreement 
is  now  or  will  remain  the  property  of  the  United  States  government 
unless  and  until  otherwise  determined  by  an  authorized  official  or 
final  ruling  of  a  court  of  law. 

Q.  And  what  did  you  explain  or  how  did  you  explain  that 
paragraph  or  that  sentence  from  paragraph  seven? 

A.  To  the  fact  that  we  don't  own  the  information  that  we  are 
utilizing  and  we  are  not  allowed  to  go  to  unauthorized  sources  with 
it.  It  remains,  after  you  leave  the  Army  it's  still  the  property  of 
the  government. 

Q.  Property  of  who? 

A.  Property  of  the  government,  sir. 

Q.  And  now  on  page  two,  could  you  please  read  paragraph  11? 
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A.  Sir,  it  says,  I  have  read  this  - 

TC [MAJ  FEIN]:  Your  Honor,  may  we  have  a  moment? 

Your  Honor,  let  the  record  reflect  I'm  covering  personal 
identifying  information. 

Q.  Could  you  please  read  that  for  the  court? 

A.  Yes,  sir.  It  states  I  have  read  this  agreement  carefully 
and  my  guestions,  if  any,  have  been  answered.  I  acknowledge  that  the 
briefing  officer  has  made  available  to  me  Executive  Order  and 
statutes  referenced  in  this  agreement  and  its  implementing  regulation 
32  C.F.R.  Section  2003.20  so  that  I  may  read  them  at  this  time  if  I 
so  choose. 

Q.  And  what  did  you  explain  particularly  about  this  paragraph 

11? 

A.  Would  ensure  that  they  did  read  it  and  understand 
everything  that  was  on  the  previous  page. 

Q.  And  did  you  —  what  special  steps  did  you  take  to  make  sure 
that  paragraph  11  was  understood? 

A.  It  was  right  before  we  signed  it,  sir. 

Q.  Did  you  ask  affirmatively  whether  they  understood? 

A.  Yes,  sir. 

Q.  And  how  did  you  know  if  they  understood  all  paragraphs  1 
through  11? 
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A.  I  would  assume  they  would  have  questions  if  they  didn't 
understand  it,  sir. 

Q.  Did  Private  First  Class  Manning  ask  you  questions  about 

this? 


A.  No,  sir. 

Q.  In  your  experience  did  Private  First  Class  Manning  ask  you 
questions  when  he  had  questions? 

A.  Yes,  sir. 

Q.  So  based  off  that  experience,  if  he  had  a  question,  would 
he  have  asked  it  at  the  time? 

A.  Yes,  sir. 

Q.  Did  Private  First  Class  Manning  voluntarily  sign  this 
document? 


A.  Yes,  sir. 

Q.  Did  you  force  him  to  sign  this  document? 

A.  I  did  not,  sir. 

Q.  What  if  he  did  not  want  to  sign  this  document? 

A.  He  wouldn't  have  been  granted  access  locally  to  classified 
material . 


Q.  Okay.  Thank  you. 

TC [MAJ  FEIN]:  Your  Honor,  I  am  retrieving  Prosecution  Exhibit  8 
[retrieving  PE  8  from  the  court  reporter] . 
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MJ:  Okay.  As  we  continue,  counsel,  I  want  both  sides  to  check 
the  exhibits  that  you  intend  to  publish  and  if  there  is  personally 
identifying  information  that  shouldn't  be  on  there,  make  a  second 
copy  for  the  publication  or  somehow  otherwise  just  make  sure  you  have 
it  masked. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

Your  Honor,  I'm  handing  the  witness  Prosecution  Exhibit  8 
[handing  PE  8  to  the  witness] . 

Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  Chief  Balonek,  could  you  please  thumb  through  that 
Prosecution  Exhibit  8  and  look  up  when  you  finish? 

[There  was  a  pause  while  the  witness  reviewed  PE  8.] 

Q.  Chief  Balonek,  what  is  Prosecution  Exhibit  8? 

A.  This  is  the  standard  SCI  read  on  packet. 

Q.  What  is  that  packet  used  for  at  2-10  Mountain? 

A.  It's  to  have  the  ability  to  access  Top  Secret  information 

with  special  caveats. 

Q.  And  why  is  that  document  —  or  why  is  that  packet  required? 

A.  It's  similar  to  the  non-disclosure  agreement.  It's  the  next 

level  for  the  Top  Secret  information. 

Q.  And  does  —  is  it  the  same  general  information  that  is  in 
the  non-disclosure  agreement,  is  it  throughout  that  packet? 

A.  Yes,  sir. 
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Q.  And  are  Soldiers  required  to  acknowledge  and  sign  it? 

A.  Yes,  sir. 

Q.  Thank  you. 

TC [MAJ  FEIN]:  I  am  retrieving  Prosecution  Exhibit  8  from  the 
witness  [retrieving  PE  8  from  the  witness  and  returning  it  to  the 
court  reporter] . 

MJ:  Prosecution  Exhibit  8? 

TC [MAJ  FEIN]:  It's  already  admitted.  Your  Honor. 

Q.  Chief  Balonek,  what  section  did  you  work  at  Fort  Drum, 
although  we've  referenced  it,  what  section  is  it? 

A.  I  worked  in  the  S-2,  sir. 

Q.  And  what  did  PFC  Manning  do  within  the  section  prior  to 
deployment? 

A.  Prior  to  deployment,  he  often  worked  on  some  of  our 
worldwide  briefs  that  were  to  the  commander  while  we  were  on  the 
global  response  force.  He  did  daily  Soldier  activities,  motor  pool 
maintenance,  PT . 

Q.  What  is  the  global  response  force? 

A.  It's  the  brigade  that  is  on  call  in  case  a  surge  brigade  is 
needed  anywhere  in  the  world. 

Q.  And  what  type  of  briefings  were  required  in  order  to  be  — 
you  just  mentioned  Private  First  Class  Manning  preparing  briefings  or 
other  products.  What  types  of  product  would  those  be? 
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A.  PowerPoint  slides,  mostly  things  that  have  already  been 
published  by  higher  level  agencies  and  intelligence  cells  that  we 
would  bring  into  our  own  presentations  and  have  the  commander  fully 
aware . 

Q.  And  did  these  briefings  also  include  the  CENTCOM  AOR? 

A.  They  did. 

Q.  Afghanistan  or  Iraq? 

A.  Yes,  sir. 

Q.  Which  one?  I'm  sorry. 

A.  At  times  it  could  be  both,  sir. 

Q.  Why? 

A.  At  that  time  we  had  kind  of  a  dual  focus.  We  were  supposed 
to  go  to  Afghanistan,  but  our  mission  changed  to  Iraq. 

Q.  Prior  to  deployment  and  the  immediate  ramp  up,  how  many 
analysts  were  in  the  brigade  S-2  shop,  approximately? 

A.  Prior  to  us  leaving,  sir? 

Q.  Prior  to  your  deployment  —  that  deployment,  yes,  that 
Private  First  Class  Manning  attended  —  joined? 

A.  Four  to  five,  sir. 

Q.  Total  analysts? 

A.  E4  and  below,  yes,  sir. 

Q.  Four  or  five? 

A.  Yes,  sir. 
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Q.  And  your  job  was  personnel  security? 

A.  Yes,  sir. 

Q.  How  did  you  do  --  or  did  you  do  any  training  to  prepare  for 
your  last  deployment,  your  deployment  to  Iraq? 

A.  I  did  attend  Master  Analyst  Course,  that  was  one  of  my 
major  training  portions. 

Q.  Did  the  unit  go  to  training? 

A.  The  unit  went  to  JRTC  twice. 

Q.  Twice.  Why  twice? 

A.  One  was  Afghan  focused,  the  second  was  an  Iraq  focus. 

Q.  When  was  the  Afghanistan  focus  JRTC  deployment? 

A.  2008,  sir. 

Q.  And  did  you  attend  this  JRTC  deployment? 

A.  Yes,  I  attended  that. 

Q.  Did  PFC  Manning  attend  the  JRTC  deployment  with  you? 

A.  He  did,  sir. 

Q.  And  what  were  your  responsibilities  —  what  was  the  —  what 
role  did  you  fill  during  this  deployment? 

A.  At  that  time  I  filled  the  night  shift.  We  were  primarily 
helping  the  day  shift  pull  the  information  they  needed  and  put 
together  any  slides  that  they  needed  for  the  day. 

Q.  Was  Private  First  Class  Manning  with  you  on  the  night 
shift? 
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A.  Yes,  sir. 

Q.  Were  you  responsible  for  him  on  the  night  shift? 

A.  Yes,  sir. 

MJ:  Major  Fein,  before  we  talk  about  —  what  period  of  time  are 

we  talking  about? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

Q.  When  was  this  JRTC  rotation? 

A.  October  of  2008,  sir. 

Q.  October  of  2008? 

A.  Wait.  I'm  trying  to  remember  JRTC  timeframes. 

Q.  Take  your  time.  That's  fine. 

A.  Yes.  It  was  late  2008,  sir. 

Q.  How  many  times  have  you  been  to  JRTC? 

A.  Just  once,  sir. 

Q.  Why  didn't  you  go  to  the  second  JRTC? 

A.  The  second  one  coincided  with  my  Master  Analyst  Course 

dates . 

Q.  Okay.  So  the  first  one  that  we're  talking  about  right  now 
that  you  attended  with  Private  First  Class  Manning,  was  when? 

A.  2008,  sir. 

Q.  Of? 

A.  October,  sir. 

Q.  October  2008? 
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A.  Yes,  sir. 

Q.  And  did  you  observe  Private  First  Class  Manning  working  in 
your  area  while  at  the  JRTC? 

A.  Yes,  sir. 

Q.  And  how  so? 

A.  He  sat  right  across  the  table  from  me,  sir. 

Q.  And  what  type  of  training  occurred  there  between  you  and 
Private  First  Class  Manning? 

A.  We  did  primarily  DCGS  training  and  some  data  mining  and 
some  slideology,  sir,  some  presentation. 

Q.  You're  using  some  terms  here.  What  do  you  mean  by  DCGS 
training? 

A.  DCGS  training,  the  software  from  the  DCGS  system,  whether 
it  be  ArcGIS  or  multi-function  work  station. 

Q.  Okay.  And  what  is  slideology? 

A.  Slideology  is  slide  format,  sir. 

Q.  So  just  formatting? 

A.  We  also  worked  on  the  intelligence  summary  for  the  day. 

Q.  Okay.  What  was  the  intelligence  summary? 

A.  It's  a  Word  document  with  a  roll  up  of  all  of  the 

intelligence  reporting. 

Q.  And  when  you  say  work  on,  what  were  the  specific  tasks  that 
you  and  Private  First  Class  Manning  had  to  accomplish  for  that? 
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A.  It  was  compiling  all  of  the  daily  reporting  into  one 
document,  basically  a  copy  and  paste. 

Q.  Did  you  have  to  understand  what  the  reporting  was  in  order 
to  compile  it? 

A.  Yes.  Often  had  to  tag  with  an  analyst  comment  of  what  we 
thought  and  what  we  thought  it  meant. 

Q.  And  what  were  the  sources  of  those  reports? 

A.  Generally  the  reports  of  JRTC  come  through  the  white  cell. 

Q.  Through  what  type  of  system? 

A.  Through  SIPRNET,  sir. 

Q.  And  is  it  through  email  or  is  it  through  DCGS  you  said  or 
ArcGIS.  You've  used  a  lot  of  terms. 

A.  The  information  can  come  from  a  variety,  it  could  be  email, 
it  could  from  their  portal  that's  specific  to  JRTC. 

Q.  And  when  did  you  deploy  for  the  fourth  time? 

A.  Yes,  sir.  Sir,  it  was  October  2009. 

Q.  And  did  you  deploy  with  the  main  body  of  2-10  Mountain? 

A.  Yes,  sir.  Main  body  One. 

Q.  Was  Private  First  Class  Manning  on  main  body  one  with  you? 

A.  Yes,  sir. 

Q.  And  where  did  you  deploy  to? 

A.  We  deployed  to  --  we  were  East  of  Baghdad. 

Q.  At  what  FOB? 
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A.  FOB  Hammer. 

Q.  How  long  did  it  take  you  to  get  to  FOB  Hammer? 

A.  From  day  1  in  Kuwait,  sir? 

Q.  Yes. 

A.  Day  1  in  Kuwait  was  approximately  3  weeks  before  we 
actually  arrived  at  Hammer. 

Q.  And  when  you  arrived  at  FOB  Hammer,  what  occurred 
immediately  after  arriving  or,  not  immediately  --  excuse  me.  What 
did  you  do  in  the  S-2  shop  once  you  arrived? 

A.  We  arrived  and  met  our  counterpart  from  3-82,  got  to  know 
our  counterparts  and  what  they  were  working  on.  We  took  part  in  what 
they  call  the  right  seat,  left  seat  ride  where  we  learned  everything 
that  they  had  been  doing  in  order  for  us  to  eventually  take  over. 

Q.  Can  you  please  explain  to  the  Court  what  you  mean  by  left 

seat,  right  seat? 

A.  Yes,  sir.  Ma'am,  left  seat,  right  seat  ride  is  basically  - 
-  it's  pictured  like  a  car.  When  we  first  get  there,  we're  in  right 
seat  mode  like  the  passenger  watching  the  previous  unit  conduct 
operations  and  gathering  information  is  how  we're  going  to  go.  Once 
we  go  in  the  left  seat  is  us  driving  and  conducting  operations  while 
the  previous  unit  starts  to  filter  out  of  country  and  assist  us  in 
any  way  they  can  before  they  go. 
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Q.  And  when  did  3rd  Brigade  of  82nd  Airborne,  when  did  they 
start  trickling  out  of  country  like  you  just  talked  about? 

A.  Certain  people  almost  immediately  upon  our  arrival. 

Q.  When  did  the  majority  of  the  S-2  shop  of  leave? 

A.  Mid  to  late  November,  sir. 

Q.  When  is  the  first  time  an  analyst  in  the  S-2  section  would 
have  had  access  to  SIPRNET  with  another  individual  not  on  their  left 
seat  or  right  seat? 

A.  Around  the  same  time. 

Q.  When  was  that? 

A.  Mid  to  late  November,  sir. 

Q.  Mid  to  late  November? 

A.  Yes,  sir. 

Q.  What  did  you  have  to  do  paperwork-wise  in  order  to  get 
access  to  a  computer  on  FOB  Hammer? 

A.  For  each  medium,  whether  it  be  unclassified,  SIPRNET,  you 
had  to  fill  out  a  user  agreement  with  the  S-6  for  them  to  create  you 
a  user  name  and  password.  Once  they  created  your  user  name  and 
password,  you  could  access  either  system. 

Q.  This  user  agreement,  did  you  have  to  sign  it? 

A.  Yes,  sir. 

Q.  Was  this  done  prior  to  deployment  or  in  theatre? 

A.  It  was  done  in  theatre,  sir. 
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Q.  What  was  your  position  —  your  duty  position  while  at  FOB 
Hammer  in  S-2  section? 

A.  It  was  the  Shia  extremist  group  team  lead. 

Q.  And  what  were  your  general  responsibilities  for  that? 

A.  General  responsibilities  were  to  research  the  threat  groups 
that  were  associated  with  that  area  and  produce  analysis  on  those 
particular  groups  and  areas. 

Q.  And  you  said  team  lead.  If  you  were  the  technical  team 
lead,  explain  briefly  for  the  Court  what  was  the  structure  of  your 
team. 

A.  Structure  was  I  was  the  lead.  I  had  then  Specialist 
Maderas  on  the  days  and  PFC  Manning  on  the  nights. 

TC [MAJ  FEIN]:  One  moment,  please. 

[Pause . ] 

Q.  And  explain,  please,  just  again  very  briefly  where  did  your 
section  fall  under,  kind  of  like  in  an  org  chart  of  the  S-2  section? 

A.  We  would  fall  under  the  all-source  warrant  Chief  Ehresman, 
then  routing  through  the  AS-2  was  Captain  Lim,  and  then  in  the  S-2, 
Major  Clausen. 

Q.  What  shift  did  you  work? 

A.  I  worked  the  days,  sir. 

Q.  And  how  would  work  get  delegated  to  you  and  then  from  you? 

A.  It  would  generally  come  from  the  S-2  himself  or  the  AS-2. 
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Q.  How  would  you  delegate  work  to  the  analysts  that  worked  for 
you?  You  said  —  was  it  Maderas  and  PFC  Manning? 

A.  Yes,  sir. 

Q.  How  did  you  delegate  work  to  them? 

A.  When  I  needed  stuff  done,  I  would  either  turn  and  talk  to 
them  or  I  would  wrap  it  up  in  an  email  so  they  had  actual  text  of 
exactly  what  we  needed. 

Q.  And  how  was  work  prioritized? 

A.  By  me. 

Q.  And  who  is  Captain  Fulton? 

A.  Captain  Fulton  in  the  beginning  was  the  plans  officer,  the 
S-2  plans  officer. 

Q.  Could  you  please  describe  in  a  little  bit  more  but  in  a 
definitely  in  an  unclass  manner  world  the  work  of  a  Shia  analyst? 

A.  We  pulled  HUMINT  reporting,  whatever  reporting  we  could  on 
our  particular  groups.  We  looked  at  SIGACTs  that  correlated  to 
those  groups  and  we  tried  to  produce  it  into  one  holistic  product  on 
how  those  groups  conducted  their  operations  and  attacked  U.S.  forces. 

Q.  And  what  computer  systems  did  you  and  your  analysts  use  in 
order  to  accomplish  this  mission? 

A.  We  used  the  DCGS  system. 

Q.  What  is  DCGS?  What  does  the  acronym  stand  for? 
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1  A.  It  stands  for  the  Distributed  Common  Ground  Station  Army, 

2  it's  often  referred  to  as  DCGS-A. 

3  MJ:  Hold  on  just  a  minute.  Say  that  one  more  time.  What  is 

4  it? 

5  WIT:  Distributed  Common  Ground  System-Army,  ma'am. 

6  MJ:  Thank  you. 

7  Q.  And,  again,  briefly  describe  what  DCGS-A  is,  please? 

8  A.  In  essence  DCGS  is  a  computer  with  a  specific  software 

9  suite  loaded  on  to  it.  It  has  specific  programs  that  are  DCGS 

10  approved  for  the  analysts  to  use. 

11  Q.  And  what  are  some  of  those  programs  that  are  on  this  DCGS-A 

12  system? 

13  A.  ArcGIS,  it's  a  mapping  tool.  The  multi-function  work 

14  station,  which  is  a  larger  program  that  is  a  mixture  of  all  of  the 

15  main  programs.  It  has  a  lighter  version  of  ArcGIS,  it  has  a  link 

16  diagram  tool,  it  does  some  other  analytical  processes. 


17 

Q. 

Are  there 

any  other  programs  on  DCGS? 

18 

A. 

Other  than 

standard  stuff  like  Microsoft  Office. 

19 

Q. 

What  about 

QueryTree? 

20 

A. 

QueryTree, 

sir,  is  a  web-based  program. 

21 

Q. 

And  what  is  QueryTree? 

22 

A. 

QueryTree 

is  a  way  to  search  multiple  intelligence 

23  databases  at  one  time  using  one  search  parameter. 
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Q.  What  is  ArcGIS? 

A.  ArcGIS  is  a  mapping  —  it's  a  geo  spatial  tool  for  map. 

Q.  And  how  does  an  analyst  use  ArcGIS? 

A.  They  can  plot  significant  activities  on  the  map.  They  can 
use  it  to  show  density  plots  to  show  where  higher  degrees  of  activity 
has  been  occurring.  You  can  use  it  to  time  stamp  data  so  you  can  do 
pattern  and  trend  analysis.  It  really  helps  paint  the  picture  of  the 
point  we're  trying  to  get  across. 

Q.  And  how  does  an  analyst  get  the  information  into  ArcGIS  to 
do  what  you  just  described? 

A.  You  can  do  it  a  multiple  number  of  ways.  You  can  use  an 
Excel  spread  sheet  and  import  multiple  amounts  of  points  at  the  same 
time,  you  can  draw  lines,  you  can  use  boundary  shaped  files,  you  can 
color  areas.  I  mean  it's  a  multitude  of  ways  you  can  import  data 
into  the  system. 

Q.  And  did  every  analyst  know  all  these  ways  that  you're 
describing  that  seem  so  simple? 

A.  If  they  didn't,  we  had  an  embedded  mentor  that  was  there  to 
assist  us  in  those  processes. 

Q.  Were  other  Soldiers  used  as  onsite  SMEs  for  simple  tasks 
like  Excel  Spread-sheeting? 

A.  Yes,  sir. 

Q.  Was  PFC  Manning  one  of  those  individuals? 
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A.  Yes.  PFC  Manning  was  good  at  those,  yes. 

Q.  Was  he  better  than  most? 

A.  I  would  say  yes. 

Q.  Did  you  rely  on  PFC  Manning  to  help  you  with  the  computer 
understanding  how  the  information  goes  from  one  system  into  the 
other? 

A.  I  asked  for  more  help  with  formatting. 

Q.  What  is  CIDNE? 

A.  CIDNE  is  another  web-based  data  search  that  houses 
reporting  from  either  Iraq  or  Afghanistan  or  significant  activity  or 
attacks . 

Q.  You  said  Iraq  or  Afghanistan.  Are  there  separate  CIDNE 
databases? 


A.  Yes,  sir. 

Q.  How  do  you  know  that? 

A.  Because  there  is  a  letter  at  the  end.  It's  CIDNE-I  and 
CIDNE-A. 


Q.  And  could  you  access  the  CIDNE-A  in  Iraq? 

A.  You  could,  yes,  sir. 

Q.  Could  you  do  it  direct  or  another  way? 

A.  I  don't  remember  going  there,  but  it's  accessible. 

Q.  Why  did  you  never  use  CIDNE  Afghanistan? 

A.  I  was  in  Iraq,  sir. 
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Q.  Why  would  an  intelligence  analyst  not  use  Afghanistan 
intelligence  information  in  Iraq? 

A.  It  didn't  have  data  that  was  relevant  to  the  work  that  I 
was  performing  in  Iraq. 

Q.  And  what  work  was  that? 

A.  SIGACT  analysis,  intelligence  analysis,  pattern  trend,  and 
reading  HUMINT,  SIGINT  reporting. 

Q.  For  what  threat  group? 

A.  Shia  analysts,  sir. 

Q.  That  was  the  same  one  that  Private  First  Class  Manning  was 
responsible  for? 

A.  Yes,  sir. 

Q.  What  are  SIGACTs? 

A.  SIGACTs  can  be  any  significant  activity  that  the  unit  would 

report.  It  ranges  from  something  very  small  like  local  national 
intimidation  to  larger  and  complex  attacks.  There  are  maybe  a 
hundred  to  150  different  types  of  SIGACTs  that  could  be  uploaded. 

Q.  And  did  you  and  the  other  analysts  use  SIGACTs? 

A.  Yes,  sir. 

Q.  Why? 

A.  SIGACTs  help  paint  the  picture  of  some  of  the  patterns  and 
some  of  the  tactics  that  enemy  forces  were  using  at  the  time.  It 
gives  a  historical  perspective  as  to  how  they  operated? 
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Q.  What  did  SIGACTs  look  like,  again,  keeping  this 
unclassified? 

A.  They  were  —  I  mean,  there  was  an  ICON  associate  plus  there 

was  a  write-up  of  what  happened  and  where,  when  and  who  it  happened 

to . 

Q.  The  SIGACTs  in  CIDNE,  were  they  in  some  database  form? 

A.  They  could  be. 

Q.  And  was  there  an  entry  about  the  classification? 

A.  Yes,  sir. 

Q.  Did  all  SIGACTs  have  a  classification  marking  of  some  sort? 

A.  Yes,  sir. 

Q.  Is  it  clear  by  reading  the  SIGACT  what  its  classification 
was  or  is? 

A.  Yes,  sir.  It's  generally  on  the  top  and  bottom  of  every 
report. 

Q.  Why  is  —  you  mentioned  historic  information.  Why  is 
historic  information  —  or  why  was  historic  information  important  to 
you  as  a  Shia  analyst? 

A.  You  can  go  back  and  look  at  how  the  groups  operated,  and 
many  times  history  tended  to  repeat  itself  within  those  SIGACTs  and 
those  groups  would  use  same  areas,  same  timeframes,  same  types  of 
munitions,  to  help  us  gain  a  little  perspective  as  to  the  when  and 
the  where  they  might  attempt  to  attack  U.S.  forces. 
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Q.  So  did  you  and  the  analysts  rely  on  the  historic  SIGACTs? 
A.  Yes,  sir. 

Q.  Were  they  of  value? 

A.  Yes,  sir. 

Q.  Did  PFC  Manning  use  historic  SIGACTs? 

A.  Yes,  sir. 

Q.  How  do  you  know? 

A.  Mostly  I  remember  he  had  one  --  he  had  a  product  that 
compared  the  past  3  years  of  Iraq  SIGACTs,  they  were  all  in  one  big 
group  number  and  it  showed  them  in  a  graph  of  how  each  year  had 
either  changed,  gone  up  or  gone  down. 

Q.  In  general  about  SIGACTs  or  topical  areas? 

A.  In  general  about  SIGACTs. 

Q.  Did  PFC  Manning  have  to  pull  certain  types  of  information 
from  SIGACTs? 

A.  Yes,  sir. 

Q.  What  type  of  information? 

A.  Mostly  locational,  what  type  of  attack  it  was. 

Q.  What  are  some  examples  of  the  attacks? 

A.  IED  attack,  small  arms  fire  against  a  convoy,  could  be  a 

Q.  Go  ahead,  I'm  sorry. 

A.  Vehicle-borne  explosive  device. 
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Q.  Would  one  have  to  understand  that  that  information  was  in 
the  SIGACT  to  pull  the  SIGACT  as  an  analyst? 

A.  Yes,  sir. 

Q.  Did  PFC  Manning  do  that  effectively  for  you? 

A.  Yes,  sir. 

Q.  Have  you  ever  used  Department  of  State  classified  or 

unclassified  information  as  an  analyst? 

A.  I  have  not,  sir. 

Q.  Could  you  have? 

A.  I'm  sure  I  could  have,  sir. 

Q.  If  you  had  access  to  it  you  could  have? 

A.  Yes,  sir. 

Q.  Did  you  or  your  analysts  ever  have  a  reason  to  research 
information  on  South  America? 

A.  No,  sir. 

Q.  What  about  Europe? 

A.  No,  sir. 

Q.  Africa? 

A.  No,  sir. 

Q.  East  Asia? 

A.  No,  sir. 

Q.  Did  you  or  your  analysts  ever  have  reason  to  review  reports 
on  U.S.  air  strikes  in  Afghanistan? 
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A.  No,  sir. 

Q.  You  or  your  analysts  ever  have  a  reason  to  review  GTMO 
detainee  records? 

A.  No,  sir. 

Q.  For  your  mission  as  a  Shia  analyst  in  Iraq,  you  didn't  have 
a  need  to  review  GTMO  detainee  records? 

A.  No,  sir. 

Q.  Did  you  or  your  analysts  ever  have  a  reason  to  search 
IntelLink  or  the  SIPRNET  for  information  on  the  country  of  Iceland? 

A.  No,  sir. 

Q.  What  about  Senior  Officials  in  Iceland? 

A.  No,  sir. 

Q.  What  about  searching  the  SIPRNET  or  Intel  —  what  is 
Intelink? 


A.  Intel  Link  in  a  nutshell  is  the  SIPR  version  of  Google. 

Q.  Okay. 

A.  It's  a  search  engine  that  allows  you  to  find,  sometimes 
quickly,  the  information  you're  looking  for. 

Q.  How  did  analysts  use  Intelink? 

A.  For,  I  mean,  if  you  couldn't  find  something,  you 
usually  try  Intelink  first  to  see  if  you  can  pull  it  out  without 
having  to  go  in  the  databases  and  look  specifically  for  one 
single  report.  If  you  had  a  numbered  report  you  could  look  in 
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Intelink  and  find  that  specific  report  without  having  to  muddle 
through  some  of  the  database. 

Q.  Was  using  Intelink  a  common  tool  used  by  the  35  Foxes  Shia 
analysts? 


A. 

Yes,  sir. 

Q. 

Would  there  be  any  reason  that  you  or  any  of  your  analysts 

would  be 

looking  at  AR  15-6  investigations  in  U.S.  CENTCOM 

operations? 


A. 

No,  sir. 

Q. 

What  about  researching  WikiLeaks  on  Intelink? 

A. 

No,  sir. 

Q. 

How  about  in  2010  downloading  the  entire  global  address 

book  for  NIPRNET? 


A. 

No,  sir. 

Q. 

Chief  Balonek,  in  reference  to  Intelink,  how  long  do  you 

estimate 

it  takes  to  search  for  a  single  document  and  download  that 

document 

to  use? 

A. 

Depending  on  the  size  of  the  file,  sir,  if  it  was  a  small 

file,  it 

could  be  less  than  a  minute;  a  larger  file  could  take  maybe 

ten  minutes 


Q. 

Why  does  file  size  matter? 

A. 

The  bandwidth  down  range  is  a  little  slower  than  it  is  in 

CONUS. 
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Q.  Assuming  best  case  bandwidth,  fastest  Internet  access 
you've  ever  had,  how  long  would  it  take  you  to  download  a  single 
document? 

A.  A  matter  of  seconds. 

Q.  Okay.  A  single  document? 

A.  Yes,  sir. 

Q.  Chief  Balonek,  have  you  ever  heard  of  the  program  WGet? 

A.  I  have  not,  sir. 

Q.  What  would  you  have  done  if  you  wanted  to  add  a  program  to 
your  computer,  excuse  me,  to  your  DCGS-A  SIPRNET  computer? 

A.  For  DCGS  you  have  to  go  through  our  field  support  engineer 
who  at  that  time  was  Mr.  Millman. 

Q.  What  about  SIPRNET  that  was  not  DCGS-A? 

A.  SIPRNET  that  was  not  DCGS-A  went  through  the  S-6. 

Q.  Are  you  familiar  with  mIRC  chat? 

A.  Yes,  sir. 

Q.  How  are  you  familiar  with  it? 

A.  It's  a  common  chat  tool  that's  used  by  many  of  the 
collection  platforms  that  are  in  theatre  to  communicate  to  the  ground 
user . 

Q.  Could  you  explain  that?  Could  you  explain  that  again  — 
well,  what  is  mIRC  chat? 

A.  It's  a  chat  tool. 
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Q.  Is  it  similar  to  instant  messaging? 

A.  Yes,  sir. 

Q.  And  is  mIRC  chat  used  throughout  Iraq? 

A.  Yes,  sir. 

Q.  Did  you  communicate  with  division  headquarters  using  mIRC 

chat? 

A.  I  personally  did  not. 

Q.  Okay.  Are  you  aware  if  division  headquarters  used  mIRC 
chat  to  communicate? 

A.  I'm  sure  they  did.  I  generally  monitored  collection 
platforms  that  were  flying  in  our  area. 

Q.  Okay.  So  were  there  different  channels  of  mIRC  chat? 

A.  Yes,  sir,  there  are  many  different  channels. 

Q.  Did  you  have  to  subscribe  to  a  channel? 

A.  You  do  not  have  to  subscribe,  you  kind  of  have  to  double 
click  to  where  you  want  to  go. 

Q.  And  then  you  can  monitor  it? 

A.  Yes,  sir. 

Q.  So  when  you  talk  about  intelligence  collection  platforms, 
you're  talking  about  what? 

A.  Mostly  UAV  and  UAS . 

Q.  What  is  UAV  and  UAS? 
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A.  Unmanned  aerial  vehicles  with  a  camera  that  would  like  a 
shadow. 


Q.  Is  that  theatre-wide  those  exist? 

A.  Yes,  sir. 

Q.  Was  mIRC  chat  used  by  every  echelon  within  Iraq? 

A.  Yes,  sir. 

Q.  Chief  Balonek,  did  you  receive  adverse  action  based  off 
your  involvement  or  your  being  assigned  to  2-10  Mountain  and  this 
court-martial? 

A.  Yes,  sir. 

Q.  And  what  was  that  adverse  action? 

A.  It  was  a  locally  filed  letter  of  reprimand. 

Q.  And  who  gave  you  this  general  officer  —  I'm  sorry.  Was  it 

a  general  officer  or  was  it  a  - 

A.  It  was  a  general  officer,  yes,  sir. 

Q.  And  who  gave  you  this  general  officer  reprimand? 

A.  Lieutenant  General  Caslan. 

Q.  And  what  was  the  reprimand  for? 

A.  Reprimand  base  was  failure  to  supervise  properly  PFC 
Manning. 


Q.  And  what  was  the  end  —  was  that  general  officer  memorandum 
of  reprimand  filed  locally  or  in  your  permanent  file? 

A.  It  was  locally,  sir. 
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Q.  How  many  years  was  it  filed  for? 

MJ:  Yes? 

CDC [MR .  COOMBS]:  Just  relevance,  ma'am,  for  this. 

MJ:  What's  the  relevance? 

TC [MAJ  FEIN]:  Ma'am,  I  withdraw  the  question. 

MJ:  Okay. 

[Examination  of  the  witness  continued.] 

Q.  Chief  Balonek,  based  on  your  training  and  knowledge  of 
classified  information,  have  you  ever  disclosed  classified 
information  to  an  unauthorized  person? 

A.  No,  sir. 

Q.  Why  not? 

A.  It's  against  the  law,  sir. 

CDC[MR.  COOMBS]:  Again,  ma'am,  just  relevance  to  this  as 

well . 

MJ:  Where  are  we  going  with  this? 

TC [MAJ  FEIN]:  Your  Honor,  the  defense  is  clearly  contesting 
knowledge.  The  United  States  has  to  prove  knowledge  for  all  of  the 
793  offenses,  knowledge  of  disclosure  and  the  potential  effects  of 
the  disclosure,  and  that's  why  we're  eliciting. 

MJ:  Well,  the  fact  that  he  didn't  disclose  doesn't  show 

anything  about  anybody  else's  knowledge  so  I'm  going  to  sustain  that. 
TC [MAJ  FEIN]:  Yes,  ma'am. 


7828 


o 


o 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


No  further  questions.  Your  Honor. 

CROSS-EXAMINATION 


Questions 

Q. 

A. 

Q. 

start  off 

A. 

Q. 

A. 

Q. 

A. 

Q. 


by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Chief  Balonek,  how  are  you? 

I'm  well,  sir.  How  are  you? 

Not  bad.  Just  have  a  few  questions  for  you.  I  want  to 
with,  you  became  a  warrant  officer  in  2010,  is  that  right? 
That's  correct,  yes,  sir. 

So  at  the  time  of  the  deployment  you  were  an  NCO? 

Yes,  sir. 

And  I  guess  at  that  time  you  were  also  a  35  Fox? 

Yes,  sir. 

So  you  went  to  the  same  35  Fox  training  that  PFC  Manning 


went  to? 


A.  They  may  have  been  structured  different,  but  yes. 

Q.  It  was  the  10  level  course? 

A.  Yes. 

Q.  And  after  that  4  month  course,  what  annual  training  did  you 
get  as  an  analyst? 

A.  We  do  the  standard,  we  do  the  OPSEC,  we  do  SAET,  the 
Subversion  and  Espionage  Training. 

Q.  That's  the  online  training? 

A.  It  can  be  online;  it  can  also  be  done  by  lecture. 
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Q.  Okay.  And  you  were  part  of  2nd  Brigade  in  the  2009,  2010 
timeframe? 

A.  Yes,  sir. 

Q.  And  you  actually  arrived  in  2006  though? 

A.  That's  correct,  sir. 

Q.  And  you  started  off  in  the  current  Ops  NCO  in  the  TOC? 

A.  Yes,  sir. 

Q.  And  then  you  became  the  collection  manager  in  charge  of 
delegating  intelligence,  surveillance  and  reconnaissance  assets? 

A.  Yes,  sir. 

Q.  And  once  deployed  you  became  the  Shia  team  threat  leader? 

A.  That's  correct,  sir. 

Q.  And  as  the  Shia  team  threat  leader,  you  were  in  charge  of 
watching  and  assessing  various  insurgent  groups;  is  that  correct? 

A.  Yes,  sir. 

Q.  You  would  then  determine  how  these  groups  kind  of  fit  into 

your  area  of  operation? 

A.  Yes,  sir. 

Q.  You  indicated  you  had  anywhere  from  just  one  or  two 
Soldiers  working  for  you  at  a  time? 

A.  Generally,  just  one  at  a  time,  sir.  We  only  had  a  three 
person  element. 

Q.  And  one  of  those  Soldiers  was  PFC  Manning? 
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A.  That's  correct,  sir. 

Q.  And  you  had  both  a  Shia  day  shift  and  a  Shia  night  shift? 

A.  Yes,  sir. 

Q.  And  on  the  Shia  day  was  yourself  and  Specialist  Maderas,  is 
that  correct? 

A.  In  the  beginning,  yes,  sir. 

Q.  And  then  the  Shia  night  was  Specialist  Cooley  and  PFC 
Manning? 


A. 

Q. 

A. 

Padgett 


Q. 

shift, 

A. 

Q. 

A. 

Q. 

A. 


Manning  was  the  Shia,  Cooley  was  the  Sunni  counterpart. 

And  who  was  the  NCOIC  of  the  night  shift? 

It  changed  a  lot,  sir.  In  the  beginning  it  was  Specialist 
,  it  was  Master  Sergeant  Adkins,  it  was  Sergeant  Tau. 
Specialist  Showman  in  the  beginning? 

For  a  very  short  period  in  the  beginning,  sir. 

And  then  PFC  Manning  initially  started  off  on  the  night 
right? 

Yes,  sir. 

And  then  he  was  moved  eventually  to  the  day  shift? 

That's  correct,  sir. 

Do  you  recall  when  that  happened? 

It  was  shortly  after  he  came  back  from  him  R  and  R  leave. 


sir. 


Q.  So  in  February  2010? 


7831 


c 


J 


1  A.  Yes,  sir 


2  Q. 

So  up  until  February  2010,  he  was  on  the  night  shift? 

3  A. 

That's  correct,  sir. 

4  Q. 

And  then  when  he  was  moved  to  the  day  shift,  who  was  his 

5  supervisor? 


6  A. 

That  would  be  me,  sir. 

7  Q. 

I  want  to  talk  just  for  a  moment  before  we  get  into  PFC 

8  Manning's  duty  performance  just  the  job  of  an  analyst  for  a  second, 

9  okay? 


10  A. 

Yes,  sir. 

11  Q. 

Now,  in  general  you  expect  an  analyst  to  read  a  lot  of 

12  things, 

right? 

13  A. 

Yes,  sir. 

14  Q. 

Because  an  analyst  is  a,  I  believe  someone's  explained  it 

15  at  one 

point,  a  jack  of  all  trades,  a  master  of  none;  would  you  agree 

16  with  that? 


17  A. 

I  don't  like  tagging  the  master  of  none,  but  I  guess  jack 

18  of  all 

trades . 

19  Q. 

All  right.  So  in  other  words,  you  got  to  have  a  lot  of 

20  base  knowledge  in  order  to  maybe  do  your  job  well? 


21  A. 

Yes,  sir. 

22  Q. 

You  would  expect  your  analysts  to  think  out  of  the  box? 

23  A. 

At  times,  yes,  sir. 
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1  Q.  You  would  expect  your  analysts  to  maybe  look  for  open 

2  source  information  to  supplement  their  work? 

3  A.  Yes,  sir. 

4  Q.  And  in  fact,  you  would  look  at  open  source  information  to 

5  supplement  your  work? 

6  A.  Yes,  sir. 

7  Q.  And  open  source  information  is  just  stuff  that's  on  the 

8  Internet  that's  not  classified,  right? 

9  A.  Correct. 

10  Q.  And  I  believe  you  had  maybe  looked  at  Early  Bird? 

11  A.  Yes,  sir. 

12  Q.  And  other  news  organizations  for  information? 

13  A.  Yes,  sir. 

14  Q.  And  analysts  —  as  far  as  an  all-source  analyst,  their  main 

15  source  of  work  was  on  the  SIPRNET,  is  that  right? 

16  A.  That's  correct,  sir. 

17  Q.  And  if  the  information  wasn't  password  protected,  an 

18  analyst  was  permitted  to  look  at  information  on  the  SIPRNET? 

19  A.  Yes,  sir. 

20  Q.  There  were  no  restrictions  put  out,  do  not  go  to  this  area 

21  as  an  analyst? 

22  A.  No,  there  were  not. 
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Q.  So  essentially  if  an  analyst  wanted  to  look  at  other  things 
on  the  SIPRNET  in  order  to  get  a  broader  base  knowledge,  they  were 
free  to  do  so? 

A.  Yes,  sir. 

Q.  You  would  not  have  stopped  an  analyst  from  doing  that? 

A.  No,  sir. 

Q.  Now,  one  of  the  things  that  an  analyst  would  look  at  was 
the  CIDNE  database,  right? 

A.  That's  correct,  sir. 

Q.  And  the  CIDNE  database  has  a  lot  of  different  information 

going  into  it,  is  that  correct? 

A.  That's  correct,  sir. 

Q.  And  one  of  those  pieces  of  information  is  the  SIGACT 
database? 

A.  Yes,  sir. 

Q.  And  I'm  sorry  to  put  you  on  the  spot,  but  can  you  think  of 
some  of  the  other  databases  that  were  in  the  CIDNE  database? 

A.  The  one  I  used  the  most  was  the  HUMINT  database. 

Q.  And  the  HUMINT  database  was  what? 

A.  It  was  filled  with  HUMINT  IIRs  from  various  areas  and 
various  sources. 

Q.  So  this  would  be  the  human  intelligence  that  we  had  from 
sources  —  true  sources  in  Iraq? 
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1  A.  Yes,  sir. 

2  Q.  Now,  in  the  human  reports,  you  wouldn't  identify  the 

3  sources  by  name,  right? 

4  A.  No,  sir. 

5  Q.  They  were  by  number? 

6  A.  That's  correct. 

7  Q.  And  with  regards  to  the  SIGACTs,  SIGACTs,  they  didn't  have 

8  sources  in  them,  right? 

9  A.  They  had  a  reporting  --  they  had  the  name  of  whoever 

10  reported  the  SIGACT. 

11  Q.  But  I'm  talking  sources,  sources  for  information. 

12  A.  Not  that  I  can  remember,  sir. 

13  Q.  You  wouldn't  list  a  true  HUMINT  source  in  a  SIGACT, 

14  correct? 

15  A.  No,  sir. 

16  Q.  You  wouldn't  do  that  because,  why? 

17  A.  To  protect  the  source. 

18  Q.  Exactly.  Now,  you  had  indicated  at  one  point  during  the 

19  direct  that  SIGACTs  were  a  historical  document? 

20  A.  Yes,  sir. 

21  Q.  Am  I  correct  that  basically  what  a  SIGACT  does,  significant 

22  activity,  is  give  you  the  five  Ws,  the  who,  what,  where,  when,  why; 

23  is  that  right? 
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A.  There's  probably  a  little  more  to  it.  It  will  give  you  that 
information,  yes,  sir. 

Q.  Okay.  And,  again,  what  a  SIGACT  will  do  is  essentially  if 
a  unit's  engaged  with  the  enemy,  you're  going  to  get  a  SIGACT  report. 


right? 

A. 

Yes,  sir. 

Q. 

And  the  SIGACT  is  going  do  come  from  the  lowest  level  unit. 

the  unit  that's  actually  engaged  in  the  combat? 


A. 

That's  correct,  sir. 

Q- 

If  something  else  happens  like  an  accidental  death  of  a 

service 

member  due  to  a  movement  accident  or  killing  of  a  civilian  or 

whatnot, 

,  that  also  will  go  into  a  SIGACT? 

A. 

Yes,  sir. 

Q. 

Again,  reported  by  the  lowest  level? 

A. 

Correct,  sir. 

Q. 

And  the  that  reporting  basically  gets  put  up  the  chain? 

A. 

Yes,  sir. 

Q. 

How  does  it  get  from  the  lowest  level  unit  to  the  S-2 

section? 


A. 

Generally  we  see  it  through  the  Command  Post  of  the  Future 

or  CPOF, 

■  it  usually  populates  on  our  screen,  then  we  can  view  the 

SIGACT. 
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Q.  Now,  that  way  of  getting  to  the  CPOF,  that's  at  the  part 
that's  already  part  of  CIDNE;  is  that  correct? 

A.  The  CPOF  is  a  separate  system,  sir. 

Q.  When  you  can  see  it  on  the  CPOF,  has  it  been  added  to  the 
CIDNE  database  at  that  point? 

A.  I  couldn't  tell  you  when  and  how  it  gets  to  the  CIDNE 
database,  but  I  know  it  gets  there  eventually. 

MJ:  What  is  the  CPOF? 

WIT:  CPOF,  ma'am,  is  the  Command  Post  of  the  Future.  It's 
another  computer  system. 

MJ:  Sorry. 

CDC[MR.  COOMBS]:  No  worries,  ma'am. 

[Examination  of  the  witness  continued.] 

Q.  So  then  you  start  out  with  the  SIGACT  at  the  lowest  level 
unit,  it  gets  reported  to  somebody  as  a  battle  captain  I  imagine,  is 
that  correct? 

A.  Yes,  sir. 

Q.  And  then  they  basically  get  that  information,  type  it  up, 
and  then  my  understanding,  correct  me  if  I'm  wrong,  over  the  next 
maybe  24  to  48  hours  that  SIGACT  is  updated  and  changed;  is  that 
right? 

A.  That's  correct,  sir. 
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Q.  And  that's  usually  because  the  initial  reporting  of  a 
SIGACT  has  inaccuracies? 

A.  It  can,  yes,  sir. 

Q.  Maybe  because  they  don't  have  all  the  information? 

A.  Yes,  sir. 

Q.  So  then  after  like  48  hours  or  so  you  get  a  finalized 
SIGACT  where  you  know  all  the  information? 

A.  Yes,  sir.  It  will  show  on  the  bottom  as  closed. 

Q.  Okay.  And  at  that  point  it  goes  up  kind  of  the  echelon 

chain  from  brigade  to  division  to  core  to  CIDNE  database? 

A.  To  the  best  of  my  knowledge,  sir. 

Q.  All  right. 

MJ:  Do  you  know? 

WIT:  I  do  not,  ma'am.  I  don't  know  the  exact  chain  of  how  a 
SIGACT  goes  up  beyond  brigade. 

[Examination  of  the  witness  continued.] 

Q.  Okay.  So  nowhere  in  your  --  you  don't  know  what  happens  to 
a  SIGACT  after  brigade? 

A.  Once  it's  on  the  CPOF,  sir,  it  can  be  seen  by  higher 
echelons . 

Q.  Okay.  And  I  want  to  make  sure  because  we're  relying  upon 
your  testimony  so  I  don't  want  to  put  words  in  your  mouth.  Do  you 
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know  what  happens  to  a  SIGACT  like  how  it  gets  up  reported  past 
brigade? 

A.  It  wasn't  in  my  realm  of  responsibilities,  sir. 

Q.  So  is  that  a  no? 

A.  That's  a  no,  sir. 

Q.  When  you  actually  see  it  —  you  talked  about  the  fact  that 
it's  kind  of  a  historical  document.  It's  historical  because  it  talks 
about  stuff  that  happened  in  the  past,  correct? 

A.  Yes,  sir. 

Q.  And  then  you  as  an  intelligence  analyst  then  would  take 
that  accounting  of  what  happened  in  the  past  and  you  would  pull 
information  in  order  to  maybe  predict  an  analysis  of  what  might 
happen  in  the  future? 

A.  That's  correct,  sir. 

Q.  And  obviously  that's  kind  of  a  goal  of  an  analyst  then  to 
maybe  read  the  tea  leaves  of  what  happened  in  the  past  in  order  to 
predict  the  future? 

A.  Yes,  it  is  one  of  our  focuses,  sir. 

Q.  And  I  imagine  that's  a  skill  that  takes  time  to  develop? 

A.  Yes,  sir. 

Q.  One  doesn't  leave  the  ten  level  analyst  course  at  Fort 
Huachuca  and  then  become  an  expert  at  analytical  work,  correct? 

A.  It  varies,  but  for  the  most  part  that's  correct. 
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Q.  And  additional  training  you  would  get  then  would  be  kind  of 
on-the-job  training  where  someone  like  yourself  would  mentor  and 
supervise  a  younger  Soldier? 

A.  Yes,  sir. 

Q.  I  imagine  much  like  with  you,  somebody  supervised  and 
mentored  you? 

A.  To  a  degree,  yes,  sir. 

Q.  And  that's  how  you  developed  and  became  a  good  analyst? 

A.  Yes,  sir. 

Q.  Now,  when  an  analyst  was  using  the  CIDNE  database,  was 
there  any  limitation  on  what  they  could  look  at  on  the  CIDNE 
database? 

A.  I  don't  know  if  there's  any  limitation,  sir.  You  can  pull 
data  up  from  probably  the  beginning  of  each  of  the  conflicts. 

Q.  You  mentioned  only  one  database  and,  again,  if  that's  the 
only  one  you  use,  that's  fine,  but  what  other  database  was  available 
on  CIDNE  besides  SIGACT  and  HUMINT? 

A.  I  can't  remember.  There  was  more  links  down  the  left 
side,  sir,  but  I  never  used  them  and  I  can't  remember  what  they  were, 
sir. 

Q.  Does  SIGINT  sound  familiar? 

A.  Yes,  sir.  I  never  —  I  didn't  —  I  don't  believe  I  ever 
used  that  portion. 
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Q.  What  is  SIGINT? 

A.  Signals  intelligence,  sir. 

Q.  And  what  is  that,  to  an  unclassified? 

A.  I'm  trying  to  think  of  the  best  unclass  way  to  say  it. 

Q.  Again,  I  won't  put  you  on  the  spot.  That's  fine.  And  then 

was  counter  IED  a  database? 

A.  I  don't  remember  if  it  was  or  not,  sir. 

Q.  How  about  any  sort  of  PSYOPS  or  anything  like  that,  was 
that  a  database? 

A.  It  may  have.  I  don't  remember,  sir. 

Q.  Even  though  you  can't  recall  the  databases,  how  many  other 
databases  in  general  were  on  CIDNE;  was  it  just  a  select  few  or  do 
you  think  there  are  quite  a  few  other  database? 

A.  I  remember  there  being  pull-downs  along  the  left  side. 

Q.  Do  you  recall  just  —  I  know  it's  a  little  bit  of  I'm  not 
for  sure,  but  are  we  talking  just  a  few  pull-downs  or  quite  a  few? 

A.  Less  than  a  dozen. 

Q.  And  each  one  of  those  represented  information  and 
databases? 

A.  Yes,  sir. 

Q.  And  an  analyst  could  go  to  that  and  look  at  anything  they 
wanted  there? 

A.  Yes,  sir. 


7841 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 


o 


o 


Q.  Do  you  know  if  anyone  ever  saved  information  from  the  CIDNE 
database  on  to  their  SIPR  hard  drive? 

A.  It  had  to  be  saved  in  Excel  format  in  order  to  utilize  that 
information . 

Q.  Could  an  analyst  download  whatever  they  wanted  on  to  their 
SIPRNET  hard  drive? 

A.  Yes,  sir. 

Q.  And  if  I  were  an  analyst  and  I  wanted  to  download  let's 
just  say  all  the  SIGACTs  for  a  given  year,  could  I  do  that? 

A.  It  would  take  some  time,  but  yes,  you  could,  sir. 

Q.  In  fact,  you've  done  that? 

A.  Maybe  not  for  a  whole  year,  but  for  periods  of  time,  yes, 

sir. 

Q.  Do  you  recall  saying  to  me  that  you  downloaded  for  a  whole 
year  in  order  to  track  trends? 

A.  I  don't  recall  for  a  whole  year,  sir. 

Q.  What  do  you  recall? 

A.  I  would  normally  go  in  month  spans,  maybe  two  to  three 
months . 

Q.  If  I  were  an  analyst  and  I  wanted  to  download  for  a  whole 
year,  any  problem  with  that? 

A.  No,  sir. 
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Q.  Now,  with  regards  to  downloading  the  information,  if  I 
wanted  to  save  that  information  on  to  a  CD  to  have  access  to  it,  any 
problem  with  that? 

A.  No,  sir. 

Q.  And  when  you  were  talking  earlier  with  Major  Fein  about  how 
long  it  would  take  with  the  fastest  ever  Internet  connectivity,  if 
you  actually  had  it  downloaded  on  your  SIPR  computer,  did  you  have  to 
rely  on  the  Internet  connectivity? 

A.  Not  if  it  was  downloaded,  no,  sir. 

Q.  And  if  you  actually  had  it  on  a  CD,  did  you  have  to  rely  on 

that? 

A.  No,  sir. 

Q.  So  that  would  give  you  quicker  access  to  information? 

A.  Yes,  sir. 

Q.  Now,  I  also  imagine  sometimes  the  SIPRNET  was  down,  is  that 
right? 

A.  At  times,  yes,  sir,  it  did  go  down. 

Q.  So  when  the  SIPRNET  was  down,  if  you  didn't  have 

information  on  your  hard  drive  or  on  a  CD,  you  really  couldn't  do 
much? 

A.  That's  correct,  sir. 

Q.  So  that  might  be  another  reason  why  you  would  download  this 
information? 


7843 


0 


9 


1  A.  Yes,  sir. 

2  Q.  Now,  I  want  to  ask  you  about  PFC  Manning's  duty  performance 

3  while  in  garrison,  okay? 

4  A.  Yes,  sir. 

5  Q.  So  prior  to  deployment.  Was  he  ever  assigned  to  you  and 

6  under  your  supervision  when  you  were  in  garrison? 

7  A.  No,  sir. 

8  Q.  Was  there  ever  a  time  though  that  you  were  in  his  chain? 

9  A.  Towards  the  --  I  mean  towards  the  --  when  we  were  getting 

10  towards  deployment,  I  would  have  been  two  levels  above  Showman,  above 

11  Mitchell. 

12  Q.  Okay.  So  as  I  understand  it  then,  PFC  Manning's  immediate 

13  supervisor  was  Specialist  Showman? 

14  A.  Yes,  sir. 

15  Q.  Her  supervisor  was  Sergeant  Mitchell,  and  then  his 

16  supervisor  was  you? 

17  A.  Yes,  sir. 

18  Q.  Because  you're  in  the  chain  then,  would  you  expect  to  hear 

19  information  about  any  Soldier  that  is  in  your  direct  chain? 

20  A.  Yes,  sir,  I  would  expect  that. 

21  Q.  And  you  would  expect  that  because  as  a  leader  you  need  to 

22  know  everything  about  your  Soldiers? 

23  A.  Yes,  sir. 
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Q.  So  if  somebody  had  information  about  one  of  your  Soldiers 
that  would  impact  on  their  deployability,  you  would  expect  to  hear 
that? 

A.  Yes,  sir. 

Q.  Especially  going  into  a  deployment? 

A.  Yes,  sir. 

Q.  And  if  anyone  had  any  information  about  whether  or  not  a 
particular  analyst  under  your  supervision  should  or  should  not  have  a 
clearance,  a  security  clearance,  you  would  expect  to  hear  that  too? 

A.  Yes,  sir. 

Q.  At  any  point  did  you  hear  from  anybody  in  your  chain  on 
whether  or  not  PFC  Manning  prior  to  deployment  should  have  a  security 
clearance? 

A.  No,  I  did  not,  sir. 

Q.  Did  anyone  bring  up  any  sort  of  concern  about  whether  or 
not  PFC  Manning  should  have  a  security  clearance  prior  to  the 
deployment? 

A.  No,  sir. 

Q.  Now,  I  want  to  ask  you  about  PFC  Manning's  duty  performance 
when  he  was  deployed,  okay? 

A.  Yes,  sir. 

Q.  Now,  as  you  said,  he  was  initially  on  the  night  shift? 

A.  Yes,  sir. 
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Q.  And  my  understanding  was  when  he  was  on  the  night  shift, 
even  though  you  had  overall  supervision  of  the  Shia  team,  you  didn't 
have  direct  supervision  of  him  at  that  point? 

A.  Not  at  that  point,  no,  sir. 

Q.  That  would  have  been  Specialist  Showman  initially,  right? 

A.  Yes,  sir. 

Q.  And  then  Specialist  Padgett? 

A.  Yes,  sir. 

Q.  And  then  later  on  Sergeant  Tau? 

A.  Yes,  sir. 

MJ:  Sergeant  who? 

CDC [MR .  COOMBS]:  Tau.  T-A-U? 

Q.  At  that  point  then,  did  you  have  any  sort  of  eyes  on  of 
what  PFC  Manning  was  doing? 

A.  No,  not  eyes  on,  no,  sir. 

Q.  And  you  indicated  that  you  would  give  responsibilities  to 
the  night  shift,  that  was  one  of  your  jobs? 

A.  Yes,  sir. 

Q.  And  at  that  point,  just  for  the  night  shift,  when  you 
weren't  directly  supervising  him,  did  you  have  any  duty  performance 
problems  with  Manning  on  the  night  shift? 
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A.  There  were  a  few  times  that  things  didn't  get  completed, 
however,  it  was  generally  because  one  of  the  officers  would  assign 
him  a  task  that  superseded  what  I  assigned  him. 

Q.  In  fact,  one  time  when  something  wasn't  done  and  PFC 
Manning  told  you  an  officer  assigned  him  a  task,  you  went  to  that 
officer  to  verify  and,  in  fact,  that  was  true? 

A.  Yes,  sir. 

Q.  So  aside  from  those  times,  PFC  Manning  completed  his  tasks 
and  you  got  the  work  product  that  you  expected? 

A.  Yes,  sir. 

Q.  Now,  let's  talk  about  when  you  supervised  him  directly  when 

he  was  moved  to  the  day  shift,  okay? 

A.  Yes,  sir. 

Q.  Now,  based  upon  your  testimony,  am  I  correct  that  that 
occurred  basically  in  the  February  timeframe? 

A.  Yes,  sir. 

Q.  Forward? 

A.  Correct. 

Q.  And  so  at  that  point  when  he  was  under  your  supervision, 
what  type  of  duty  performer  was  PFC  Manning? 

A.  With  regards  to  his  products,  his  products  were  often,  on  a 
scale  of  like  bad  to  good,  they  were  on  the  high  end  of  that  scale  to 
very  good. 
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Q.  Okay.  So  and  I  think  at  one  point  you  even  said  his 
products  were  excellent.  Do  you  recall  saying  that? 

A.  Yes,  he  did  put  together  some  I  would  say  excellent 
products . 

Q.  And  you  even  said  at  one  point  like  you  would  take  a  few  of 
his  slides,  a  few  of  his  products  and  incorporate  them  into  your 
stuff  because  they  were  so  good? 

A.  Some  of  his  slides  made  it  into  our  graphic  intelligence 
summary,  when  directed  by  the  S-2 . 

Q.  Did  you  ever  have  any  problems  with  him  completing  his  task 
when  he  was  under  your  supervision? 

A.  No,  sir. 

Q.  And  as  far  as  from  your  ability  to  supervise  him  really 
from  the  February  timeframe  to,  I  guess  the  time  that  he  was  removed 
from  the  SCIF,  right? 

A.  Yes,  sir. 

Q.  From  that  timeframe  to  May,  did  you  ever  have  any  problems 
with  his  productivity  level?  Did  it  ever  drop? 

A.  No,  sir. 

Q.  How  about  his  quality  of  work,  did  his  quality  of  work  ever 

drop? 

A.  No,  sir. 
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Q.  Did  you  ever  talk  to  PFC  Manning  about  his  future  in  the 
military? 

A.  There  was  one  instance  I  can  remember,  he  asked  what  it 
would  take  to  advance  his  Army  career,  like  what  he  needed  to  do. 

Q.  All  right.  So  he  was  expressing  interest  to  I  guess  get 
promoted  or  get  better  in  his  position? 

A.  Yes,  sir. 

Q.  And  I  guess  as  a  mentor  that  would  be  a  good  conversation 
to  have  for  him  with  you? 

A.  Yes,  sir. 

Q.  Did  you  ever  talk  about  politics? 

A.  No,  sir. 

Q.  Did  you  ever  talk  to  him  about  what  he  did  in  his  off  duty 
hours? 

A.  Not  that  I  can  remember,  sir,  no. 

Q.  And  I  know  you  were  his  supervisor,  you  weren't  his  friend, 

right? 

A.  No,  sir. 

Q.  Did  you  notice  that  he  had  a  lot  of  friends? 

A.  I  did  not  notice,  sir. 

Q.  Now,  I  want  to  go  into  a  little  bit  about  the  T-SCIF 
operations,  okay?  Who  was  primarily  responsible  for  the  T-SCIF 
operations? 
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A.  The  SCIF  itself,  sir? 

Q.  Yes. 

A.  It  was  a  combination  of  Master  Sergeant  Adkins  and 
Lieutenant  Fields. 

Q.  And  why  were  they  primarily  responsible  for  the  operations 
of  the  SCIF? 

A.  At  the  time  Lieutenant  Fields  was  acting  as  the  Special 
Security  Representative  and  Master  Adkins  was  the  NCOIC. 

Q.  And  the  Special  Security  Representative,  what  is  that? 

A.  It's  the  level  down  from  the  special  security  officer  at 

division.  It's  basically  the  representation  of  the  division  SSO. 

Q.  And  my  understanding  is  they  basically  make  sure  everything 
going  on  in  the  SCIF  is  appropriate  and  proper? 

A.  Yes,  sir. 

Q.  And  did  Master  Adkins  ever  take  over  that  position  as  the 

SSR? 

A.  I  don't  remember,  sir. 

Q.  Okay.  Now,  with  regards  to  the  T-SCIF,  was  it  common  to 
see  Soldiers  playing  music  in  the  T-SCIF? 

A.  Yes,  sir. 

Q.  And  common  to  see  it  on  their  DCGS-A  computer? 

A.  Yes,  sir. 

Q.  Coming  from  the  T-drive? 
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A.  Yes,  sir. 

Q.  And  the  DCGS-A  computer  and  the  T-drive  were  both  SIPR 
level,  guess  one's  a  drive,  one's  a  computer;  correct? 

A.  That's  correct,  sir. 

Q.  And  it's  my  understanding  music  should  not  be  on  a  DCGS-A 
computer? 

A.  It  was  there,  sir. 

Q.  I  know.  But  my  question  is  it  shouldn't  be  on  there, 
right? 

A.  I  don't  know  if  it  was  authorized  or  not. 

Q.  Well,  I  mean  you're  the  —  I  mean  you  did  a  lot  of  briefing 

on  the  non-disclosure  agreement,  do  you  remember  that? 

A.  Yes,  sir. 

Q.  And  you've  had  security  training  and  whatnot,  correct? 

A.  Yes,  sir. 

Q.  So  is  music  supposed  to  be  on  a  SIPR  computer? 

A.  I  can't  remember  if  it  was  authorized  in  theatre  or  not. 

Q.  Okay.  So  we'll  break  that  down  then.  In  garrison  was 
music  supposed  to  be  on  a  SIPR  computer? 

A.  I  don't  think  so,  sir. 

Q.  And  why  not? 

A.  Garrison  seemed  to  operate  different. 

Q.  Than  the  deployed  environment? 
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A.  Yes,  sir. 

Q.  And  it  operated  differently  because  in  garrison  the  rules 
were  much  more  enforced,  correct? 

A.  And  different  rules  for  different  areas,  sir.  For  example, 
mIRC  could  not  be  on  DCGS  in  garrison;  however,  it  was  authorized  in 
theater. 

Q.  When  you  say  authorized,  how  do  you  know  it  was  authorized? 

A.  It  was  from  the,  our  field  support  engineer,  Mr.  Millman. 

Q.  And  did  Mr.  Millman  always  put  all  mIRC  chat  on  every 

computer? 

A.  To  my  knowledge,  yes. 

Q.  Did  you  know  that  PFC  Manning  put  mIRC  chat  on  a  computer? 

A.  I  did  not,  sir. 

Q.  All  right.  Now,  with  regards  to  games,  did  you  see  games 
on  computers? 

A.  Games  were  on  the  T-drive,  yes,  sir. 

Q.  And  also  played  on  the  DCGS-A  computer? 

A.  They  could  be. 

TC [MAJ  FEIN]:  Your  Honor,  objection.  Cumulative.  Already  asked 
and  answered.  Games,  videos,  music,  it's  already  been  asked. 

MJ:  All  right.  Why  are  we  doing  this  twice? 

CDC [MR.  COOMBS]:  I  didn't  ask  the  witness  about  - 
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MJ:  I  know  you  didn't  ask  this  witness,  but  it's  been  asked 

before.  What  new  information  are  we  getting  out? 

CDC[MR.  COOMBS]:  In  this  instance  if  the  government  wants  to 

concede  that  music,  movies  and  games  were  on  a  DCGS-A  computer  and 
also  on  the  T-drive,  and  I'll  get  from  this  witness  that  games  were 
executable  files,  then  if  they  want  to  concede  that  and  stipulate  to 
that,  I'm  going  to  move  on. 

MJ:  I'm  going  to  overrule  the  objection.  Go  ahead. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  were  games  on  the  DCGS  computers? 

A.  Games  were  present,  yes,  sir. 

Q.  And  Soldiers  were  allowed  to  play  those  games  on  those 
computers? 

A.  Not  at  all  times.  They  were  there  and  work  was  low,  it 
became  allowed. 

Q.  All  right.  Now,  from  your  understanding  were  these  types 
of  games  supposed  to  be  on  a  SIPRNET  computer? 

A.  They  were  on  the  T-drive,  sir.  I  didn't  know  if  they  were 
authorized  for  our  purposes  or  not. 

Q.  And  the  games  that  were  there,  they  were  basically 
something  that  you  would  double  click  and  it  would  start  up,  correct? 

A.  Yes,  sir. 

Q.  And  that's  an  executable  file,  right? 
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1  A.  I'm  still  not  really  all  that  familiar  with  the  executable 

2  file,  but  - 

3  MJ:  Do  you  know  if  it's  an  executable  file  or  not? 

4  WIT:  I'm  not  familiar  with  executable  file. 

5  Q.  Do  you  know  what  an  executable  file  is? 

6  A.  From  my  understanding,  it's  like  a  shortcut.  I'm  not  sure 

7  if  I'm  right  or  not. 

8  MJ:  The  witness  doesn't  know,  Mr.  Coombs.  Move  on,  please. 

9  Q.  With  regard  to  mIRC  chat,  how  was  that  on  the  DCGS-A 

10  computers? 

11  A.  It  was  installed  in  the  program  files. 

12  Q.  That's  your  memory,  it  was  installed  in  the  program  files? 

13  A.  If  I  wanted  to  get  the  shortcut,  I  had  to  go  in  there  and 

14  pull  a  shortcut  out  to  my  desktop. 

15  Q.  Okay.  So  from  your  perspective,  mIRC  chat  was  something 

16  that  was  part  of  the  DCGS-A  computer  baseline  programs? 

17  A.  Not  initially.  It  had  to  be  put  on  after  by  Mr.  Millman. 

18  Q.  And  that's  your  testimony? 

19  A.  Yes,  sir. 

20  Q.  Okay.  I  want  to  ask  you  about  those  DCGS-A  computers. 

21  Heat  was  a  problem  for  the  DCGS-A  computer,  correct? 

22  A.  Yes,  sir. 
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Q.  And  even  if  they  were  in  an  air  conditioned  room,  heat  was 
a  problem  for  the  DCGS? 

A.  Yes,  sir. 

Q.  And  when  these  were  overheated,  they  would  tend  to  crash? 

A.  That's  correct,  sir. 

Q.  And  they  would  crash  either  because  of  the  heat,  and 
sometimes  they'd  even  crash  because  of  the  dust  of  being  in  the 
desert  environment? 

A.  Yes,  sir. 

Q.  And  when  the  DCGS  computers  crashed,  you  would  lose 
information? 

A.  Yes,  sir. 

Q.  And  so  to  combat  that.  Soldiers  were  instructed  to 

basically  save  their  information  in  other  locations? 

A.  Yes,  sir. 

Q.  And  a  Soldier  could  save  that  information  on  the  T-drive? 

A.  That's  correct. 

Q.  And  if  a  Soldier  wanted  to,  they  could  save  that 
information  on  to  a  CD? 

A.  Correct. 

Q.  And  there  was  no  limitation  as  to  what  a  Soldier  could  or 
could  not  save  on  to  the  T-drive,  correct? 

A.  Not  that  I  was  aware  of,  sir. 
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Q.  So  if  I  saw  something  on  the  SIPRNET  and  I  wanted  to  put  it 
on  the  T-drive,  I  was  permitted  to  do  that? 

A.  Yes,  sir. 

Q.  Because  they  were  both  Secret  level,  correct? 

A.  Yes,  sir. 

Q.  And  there's  no  limitation  on  what  a  Soldier  could  pull  from 
the  SIPRNET  and  put  on  to  a  CD? 

A.  Only  the  size  of  the  CD,  sir. 

Q.  Correct.  So  if  I  saw  something  on  SIPRNET  and  I  wanted  to 
put  it  on  a  CD,  I  could  do  that? 

A.  You  could,  sir. 

Q.  And  then  I  would  label  it  appropriately? 

A.  Yes,  sir. 

Q.  Now,  you  talked  about  the  non-disclosure  agreements,  and 
you  said  --  if  I  could  retrieve  Prosecution  Exhibit  60  [retrieving  PE 
60  from  the  court  reporter].  You  went  over  the  —  I'm  showing  the 
witness  what's  been  marked  or  what  is  Prosecution  Exhibit  60  [handing 
PE  60  to  the  witness] . 

You  said  you  went  over  that  with  every  person  who 

signed  it? 

A.  Yes,  sir. 
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Q.  And  you  went  to  paragraph  4  that  talks  about  all  the 
provisions  that  you  could  be  in  trouble  for  if  you  violated  the  non¬ 
disclosure  agreement? 

A.  Yes,  sir. 

Q.  And  did  you  —  do  you  know  what  those  provisions  are? 

A.  I  did  at  the  time,  but  I  haven't  looked  at  them  in  a  few 
years,  sir.  I  had  them  readily  available  if  needed. 

Q.  But  you've  signed  non-disclosure  agreements  since  you 
worked  there,  right? 

A.  Yes,  sir. 

Q.  So  I  imagine  you  signed  something  like  that? 

A.  Yes,  sir. 

Q.  So  when  you  signed  it,  did  you  know  what  those  provisions 

were? 

A.  For  some,  probably  not. 

Q.  Okay.  And  if  you  go  to  the  back  of  that,  it  says  —  I 
guess  it's  paragraph  11. 

A.  Yes,  sir. 

Q.  It  says  that  all  these  provisions  are  now  available  for  you 
to  look  at? 

A.  Yes,  sir. 

Q.  And  how  was  that  done? 

A.  I  had  them  locally  on  my  computer. 
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Q.  And  did  you  actually  open  them  up  and  show  them  to  the 
Soldiers? 


A.  Nobody  ever  so  chose. 

Q.  Never.  Okay.  Now,  how  long  did  it  --  I'll  retrieve 
Prosecution  Exhibit  60  from  the  witness  [retrieving  PE  60  from  the 
witness  and  returning  it  to  the  court  reporter] . 

How  long  did  you  go  over  an  NDA  agreement  typically 


with  a  Soldier? 

A.  It  generally  wasn't  very  long,  sir. 

Q.  Like  how  much  time? 

A.  Maybe  less  than  10  minutes.  Enough  time  for  them  to  read 
it  and  ask  any  questions  and  sign  the  paper,  sir. 

Q.  And  how  often  did  you  get  question  like  a  Soldier  saying  I 
need  to  ask  a  few  questions  about  this? 

A.  Almost  never. 

Q.  So  they  basically  just  read  and  signed  it? 

A.  Yes,  sir. 

Q.  And  did  you  have  a  Soldier  read  it  out  loud  to  you  as  they 
read  it? 


A.  No,  sir. 

Q.  And  you  went  —  Major  Fein  had  you  talk  about  each  of  the 
few  sentences  you  read  out  loud  to  us  and  then  you  said  what  you 
would  say,  right? 
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1  A. 

Yes,  sir. 

2  Q. 

Did  you  do  this  every  time?  Did  you  like  go,  "I'm  going  to 

3  read  this 

sentence  and  then  here's  what  I'm  going  to  tell  you?" 

4  A. 

Usually  I  gave  the  gist  at  the  beginning  and  the  end  to 

5  make  sure 

they  understood  the  main  point,  sir. 

6  Q. 

So  it  wasn't  like  you  read  that  provision  to  them  and  then 

7  explained 

to  them  what  it  meant? 

8  A. 

Correct,  sir. 

9  Q. 

Major  Fein  also  asked  you  about  a  whole  bunch  of  places  and 

10  whether  or  not  you  had  a  reason  to  go  there.  Again,  my 

11  understanding,  if  I'm  an  all-source  analyst  and  it's  on  the  SIPRNET. 

12  I  can  go  look  at  it  if  I  want  to,  is  that  right? 


13  A. 

You  could,  sir. 

14  Q. 

So  even  if  I  don't  necessarily  have  a  reason  but  I'm 

15  thinking. 

you  know  what,  I  want  to  see  what's  going  on  in 

16  Afghanistan,  I  want  to  see  may  if,  I  don't  know,  maybe  if  the  enemy 

17  is  using  the  same  tactics  they're  using  in  Iraq.  I  could  go  look  at 

18  CIDNE  Afghanistan? 


19  A. 

You  could. 

20  Q. 

If  I  were  one  of  your  analysts  and  you  came  over  my 

21  shoulder  and  I  was  looking  at  CIDNE  Afghanistan,  you  wouldn't  say, 

22  "Oh,  wait  a  second,  stop." 

23  A.  I  would  ask  why  you're  there  and  what  you're  looking  for 
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1  Q.  And  if  I  said,  oh,  I  just  want  to  see  if  the  enemy  there  is 

2  using  something  similar  to  what  the  enemy  is  using  here,  I  guess  you 

3  would  be  okay  with  that? 


4 

A. 

With  a  good  justification,  yes. 

5 

Q. 

All  right.  Now,  with  regards  to  the  GAL  —  do 

you  know 

6 

what  the 

GAL  is? 

7 

A. 

No,  sir. 

8 

Q. 

I  mean  were  you  asked  any  reason  to  go  to  the 

GAL.  Do  you 

9 

know  what 

you  were  asked? 

10 

A. 

No,  sir. 

11 

Q. 

So  when  you  said,  no,  I  mean  you  said  no  because  you  didn'1 

12 

know  what 

the  GAL  was? 

13 

A. 

I  don't  remember  being  asked  about  the  GAL. 

14 

MJ: 

What  is  a  GAL? 

15 

CDC [MR.  COOMBS]:  The  global  address  list. 

16 

MJ: 

Hang  on.  Global  what? 

17 

CDC [MR.  COOMBS]:  Global  address  list. 

18 

MJ: 

Okay. 

19 

Questions 

continued  by  the  civilian  defense  counsel  [MR. 

COOMBS] : 

20 

Q. 

Do  you  recall  being  asked  did  you  have  any  reason  to 

21 

download 

the  GAL,  the  global  address  list? 

22 

A. 

Yes. 

23 

Q. 

Do  you  know  what  that  is? 
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A.  It's  generally,  if  I'm  understanding  correctly,  it's  the 
address  list  of  email  addresses  throughout  the  entire  U.S.  Army  and 
DOD. 

Q.  Oh,  so  you  think  it's  for  the  entire  U.S.  Army  and  DoD? 

A.  It's  a  very  big  list,  sir. 

Q.  Okay.  All  right.  So  if  I  wanted  to  download  all  of  say  — 

oh,  I  don't  know,  the  brigade  that's  deployed  with  me,  their  address 
list,  could  I  do  that? 

A.  I'm  sure  you  could.  I  couldn't  begin  to  tell  you  how  to  do 
it,  but  I'm  sure  you  could. 

Q.  And  if  I  wanted  to  do  that  like  maybe  export  that  to  Excel 
or  whatnot  just  with  everyone's  name  and  address,  and  if  I  could  show 
you  I  could  do  that,  would  you  have  a  problem  with  that? 

A.  I  would  again  ask  the  relevance  of  why  whoever  was  doing 
it. 

Q.  And  if  the  Internet  activity,  the  SIPRNET  was  down,  would 
you  have  access  to  the  global  address  list? 

A.  No,  you  would  not,  sir.  That  would  take  the  Outlook 
program  down  with  it. 

Q.  Okay.  So  if  somebody  downloaded  the  address  list  just  to 
have  the  address  list,  didn't  do  anything  with  it,  from  your 
knowledge,  was  there  any  prohibition  that  was  put  out  not  to  do  that? 

A.  Not  to  my  knowledge,  no,  sir. 
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Q.  The  SIGACTs  for  the  CIDNE  database  in  the  2009,  2Q10 
timeframe,  do  you  recall  that  database  ever  not  being  available  to 
you  as  an  analyst? 

A.  I  don't,  sir. 

Q.  Subsequent  to  PFC  Manning  leaving  the  SCIF  in  May  of  2010, 
did  you  as  an  analyst  ever  not  have  access  to  the  SIGACTs? 

TC [MAJ  FEIN]:  Objection,  Your  Honor.  Relevance. 

MJ:  What  is  the  relevance? 

CDC [MR.  COOMBS]:  Relevance,  ma'am,  would  go  toward  the  641 

offense,  the  conversion. 

MJ:  How  is  that  relevant? 

CDC [MR.  COOMBS]:  Again,  the  government  has  argued  either 

stealing,  purloining  or  knowingly  converts.  One  of  the  requirements 
for  conversion  is  that  there's  been  some  substantial  interference  - 

MJ:  All  right.  Overruled. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  with  regards  to  after  the  May  2010,  timeframe,  did  your 
unit  —  because  you  said  nothing  in  the  2009  to  2010  timeframe,  you 
were  —  you  always  had  access  to  the  CIDNE  database,  correct? 

A.  When  I  went  there,  yes.  From  what  I  remember. 

Q.  Anytime  while  you  were  in  Iraq,  did  you  not  have  access  to 
the  CIDNE  database? 
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A.  I  can't  remember  a  time  that  I  didn't  have  it. 

Q.  And  when  did  you  leave  Iraq? 

A.  May  2010  timeframe. 

Q.  Okay.  So  then  after  May  2010,  as  an  analyst  I  guess  you 
probably  still  had  access  to  CIDNE  database? 

A.  If  I  needed  to,  I  could  have  requested  my  account  be 
unlocked  at  Drum  and  go  to  it,  but  I  didn't. 

Q.  Did  you  ever  hear  of  the  CIDNE  database  not  being  available 
to  analysts  after  May  of  2010? 

A.  I  never  heard  of  it,  no,  sir. 

CDC [MR .  COOMBS]:  Chief  Balonek,  thank  you.  I  have  no  further 


questions . 

MJ:  Redirect? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

REDIRECT  EXAMINATION 

Questions  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  To  clarify.  Chief  Balonek,  when  earlier  I  asked  was  there 
any  reason  for  an  analyst  to  download  the  global  address  list  book 
for  Iraq,  is  there  any  reason  why  one  of  you  or  your  analysts  would 
have  done  that? 

A.  I  can't  think  of  a  reason  it  was  necessary,  sir. 
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Q.  In  reference  to  SIGACTs,  you  testified  a  moment  ago  that 
there  were  no  true,  quote,  true  HUMINT  sources.  What  were  —  explain 
what  a  HUMINT  source  is,  please,  for  the  Court. 

A.  Human  source  is  just  that,  a  source  of  information  that 
would  either  come  in  to  talk  to  U.S.  forces  and  provide  information 
on  individuals,  persons,  places,  events,  and  that  information  would 
go  into  a  written  report  and  be  published  to,  published  to  the 
brigade. 

Q.  Keeping  this  unclassified,  are  there  different  levels  of 
human  sources  within  the  United  States  government? 

A.  Yes,  sir. 

Q.  Okay.  And  in  keeping  it  unclassified,  could  you  just 
briefly  explain  how  there  are  different  levels  of  human  sources? 

A.  It  boils  down  to  the  agency  that  is  usually  running  that 
source  and  the  information  that  that  source  provides. 

Q.  So  it  depends  on  the  organization  that  is  running  a  human 
source? 

A.  In  essence,  yes. 

Q.  I'm  sorry. 

A.  Yes. 

Q.  Are  you  familiar  with  the  levels  of  war,  strategic, 
operational? 

A.  Yes,  sir. 
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Q.  What  are  the  levels  of  intelligence  operations,  is  it 
similar? 

A.  Yes,  sir.  We  have  operational  intel  and  strategic  intel. 
It's  along  the  same  lines. 

Q.  What's  the  lowest  level? 

A.  Lowest  level  is  operational. 

Q.  Operational  is  the  lowest  level? 

A.  For  us,  yes.  Or  Tactical,  if  you  will. 

Q.  So  tactical? 

A.  Yes. 

Q.  So  what  are  the  three? 

A.  Tactical,  operational,  strategic,  sir. 

Q.  Does  each  level  of  intelligence  have  human  sources? 

A.  Yes,  sir. 

Q.  Is  a  conversation  that  an  infantry  man  has  on  the  ground 
with  a  local  national,  could  that  be  a  human  source? 

A.  It  could  be,  sir. 

Q.  And  for  the  SIGACT  database,  what  were  the  sources  or  — 

excuse  me,  for  CIDNE,  what  were  the  sources  for  the  HUMINT  side  of 
CIDNE? 

A.  They  were  all  categorized  by  number.  They  were  generally  - 
-  I  mean  you  had  to  actually  go  in  and  read  some  of  the  source  notes 
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1  to  know  there's  a  very  redacted  version  of  their  background.  For  the 

2  most  part  they  were  local  national. 

3  Q.  Okay.  And  then  did  SIGACTs  also  contain  information  about 

4  local  nationals? 

5  A.  Yes,  sir. 

6  Q.  Did  the  SIGACTs  have  information  about  local  nationals 

7  using  codes  or  their  actual  names? 

8  A.  If  they  were  in  there  for  a  SIGACT  on  a  casualty,  sir,  or 
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Q.  Any  type  of  SIGACT,  any  of  the  hundred  you  said  types  of 
SIGACT,  could  there  be  local  national  names? 

A.  Yes,  there  could  be,  yes,  sir. 

Q.  And  did  analysts  rely  on  those  local  national  names  in 
SIGACTs  depending  on  the  project  or  task? 

A.  I  wouldn't  say  rely,  sir.  It  was  information  that  was 
there,  if  it  was  needed. 

Q.  And  was  there  other  identifying  information  within  SIGACTs? 

A.  Yes,  sir. 

Q.  What  other  type  of  identifying  information  of  anyone  was  in 
there? 

A.  You  could  have  battle  roster  numbers  of  U.S.  persons  that 
were  injured  or  killed. 
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Q. 

So  for  U.S.  persons,  what  type  of  information  are 

in  the 

2 

SIGACTs? 

3 

A. 

Usually  their  battle  roster,  which  is 

a  combination  of 

4 

initials 

,  it ' s  an  alphanumeric  code. 

5 

Q. 

Were  names  in  SIGACTs  at  times? 

6 

A. 

Yes,  sir. 

7 

Q. 

What  about  unit  identifiers? 

8 

A. 

Yes,  sir. 

9 

Q. 

What  about  homes  of  local  nationals, 

like  their  residence, 

10 

where  they  work? 

11 

A. 

They  could  be,  yes,  sir. 

12 

Q. 

How  often  did  SIPRNET  actually  go  down  in  your  experience 

13 

in  that 

last  deployment? 

14 

A. 

Sporadically,  maybe  between  five  and 

ten  different 

times 

15 

that  I  can  remember. 

16 

Q. 

Over  the  whole  deployment  or  per  week 

? 

17 

A. 

Over  the  whole  deployment,  sir. 

18 

Q. 

And  those  five  or  ten  sporadic  times. 

how  long  was 

it  down 

19 

for? 

20 

A. 

It  could  range  from  very  short,  like 

30  minutes  to 

an  hour 

21 

to  many 

hours . 

22 

Q. 

So  what's  the  longest? 

23 

A. 

Three  to  four  hours  maybe. 
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Q.  Do  you  remember  on  your  deployment  if  you  ever  had  a  period 
of  time  that  SIPRNET  went  down  where  you  needed  actionable 
intelligence  at  that  moment? 

A.  I  can't,  sir. 

Q.  During  the  last  deployment. 

A.  Yes,  sir. 

Q.  Was  Private  First  Class  Manning  watched  or  monitored  every 
moment  he  was  in  the  SCIF? 

A.  No,  sir. 

Q.  Why  not? 

A.  Because  he  worked  with  us.  He  had  that  level  of  trust  as  a 
coworker. 


Q.  But  he  had  access  to  classified  information? 

A.  Yes,  sir. 

Q.  So  why  was  he  not  monitored? 

A.  He  worked  with  us,  sir.  You  have  to  trust  the  other 
analyst  beside  you.  It's  literally  impossible  to  watch  someone  24 
hours  a  day,  sir,  and  conduct  your  own  research  and  analysis. 

Q.  And  if  you  were  standing  over  Private  First  Class  Manning 
at  a  SIPRNET  DCGS  computer  and  saw  him,  for  instance,  remove  a  CD  and 
take  it  to  his  CHU,  would  you  have  stopped  him? 

A.  Yes,  sir. 
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Q.  If  you  had  seen  him  move  a  detainee  assessment  onto  a  CD 
and  move  them  to  his  CHU  and  put  them  on  the  Internet,  would  you  have 
stopped  him? 

A.  Yes,  sir. 

Q.  If  you  saw  him  move  over  250,000  Department  of  State  cables 
to  a  CD  from  his  SIPRNET  DCGS  computer,  would  you  have  stopped  him? 

A.  Yes,  sir. 

Q.  Is  that  something  you  witnessed? 

A.  No,  sir. 

TC [MAJ  FEIN]:  Thank  you.  No  further  questions.  Your  Honor. 

MJ:  Briefly. 

CDC [MR.  COOMBS]:  Thank  you,  Your  Honor. 

RECROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  if  you  had  seen  him  put  mIRC  chat  on  Specialist 
Showman's  computer,  would  you  have  stopped  him? 

A.  I  would  have  asked  him  why  he's  installing  software  in  the 

DCGS. 

Q.  And  he  said,  "Well,  it's  not  a  problem,  I  can  do  this?" 

A.  It  still  would  have  had  to  go  through  the  FSC. 

Q.  So  you  would  have  stopped  him? 

A.  Yes,  sir. 
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Q.  So  now,  with  regards  to  the  names  in  SIGACTs  —  okay,  when 
we're  talking  names  in  SIGACTs,  this  is  from  a  low  level  reporting 
unit  who  is  writing  down  a  name? 

A.  Yes,  sir. 

Q.  And  I'm  correct,  am  I  not,  that  there  are  50  different  ways 
in  the  CIDNE  database  to  spell  Mohammed? 

A.  There  may  be  even  more,  sir. 

Q.  And  it's  not  because  there  are  that  many  different  ways  to 
spell  Mohammed,  correct,  it's  just  because  that's  how  a  person  typed 
it  into  a  SIGACT? 

A.  Very  possible,  sir.  But  there  are  many  different  ways  to 
spell  it. 

Q.  I  know.  That's  because  people  phonetically  spell  Arabic 
names,  right? 

A.  Correct. 

Q.  And  they  don't  get  the  full  Arabic  names? 

A.  Not  at  all  times. 

Q.  So  when  a  Soldier  —  ground  level  Soldier  is  typing  in  a 
name  of  somebody  or  putting  a  name  down,  this  is  not  like  getting  an 
ID  from  somebody  and  saying,  "Okay,  I  see  that  you're,  you  know,  Mr. 
David  Coombs,  this  is  where  you  live,  let  me  write  this  down." 

That's  not  the  type  of  information  you  put  in  a  SIGACT,  right? 
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A.  It  depends  on  the  contact,  sir.  Sometimes  when  information 
like  that  actual  identification  is  found  it  can  go  in  the  SIGACT. 

Q.  But  I'm  talking  about  the  source.  If  you're  talking  to 

somebody  on  the  ground,  you're  a  unit  and  you  roll  into  some  place 
and  you  see  an  IED  happen  and  you  go  up  to  somebody  and  say,  "What 
happened,"  and  Mohammed  Ali  Muhat,  "Says  we  saw  some  bad  people  here, 

you  need  write  down  Mohammed  Ali  Muhat,"  that's  how  I'm  getting  the 

name;  is  that  correct? 

A.  To  my  knowledge,  yes. 

Q.  And  you  said  there  are  different  levels  of  sources.  The 
sources  that  you  relied  on  for  HUMINT  intelligence  came  from  humans, 
correct? 

A.  Yes,  sir. 

Q.  You  also  said  that  sometimes  the  Cl  would  have  names  of 
Soldiers  that  were  killed? 

A.  Yes,  sir. 

Q.  And  unit  identifiers? 

A.  Yes,  sir. 

Q.  And  if  a  Soldier  was  killed,  am  I  correct  that  after  their 
next  of  kin  was  notified,  PAO  would  do  —  the  Public  Affairs  Office 
would  do  a  release  saying  this  Soldier  from  this  unit  was  killed? 

A.  Yes,  at  some  point  after,  yes,  sir. 

CDC [MR.  COOMBS]:  Okay.  Thank  you.  No  further  questions. 
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MJ:  Any  final  redirect? 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  I  have  a  couple  of  questions  for  you. 

EXAMINATION  BY  THE  COURT-MARTIAL 
Questions  by  the  military  judge: 

Q.  You  testified  earlier  that  there  would  be  times  I  think  in 
your  words  you  used  that  work  was  low  and  people  would  watch  movies 
and  do  other  things  that  weren't  work-related.  If  an  intelligence 
analyst  rather  than  watching  a  movie  was  interested  in  politics  and 
wanted  to  surf  the  SIPR,  if  you  will,  to  look  at  things  that  weren't 
pertinent  to  his  job  or  her  job,  is  there  a  prohibition  against  that 
or  not? 

A.  There's  not,  ma'am. 

M J :  Any  follow-up  based  on  that? 

TC [MAJ  FEIN]:  No,  ma'am. 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

MJ:  Temporary  or  permanent  excusal. 

TC [MAJ  FEIN]:  Temporary  excusal. 

[The  witness  was  duly  warned,  temporarily  excused  and  withdrew  from 
the  courtroom . ] 

MJ:  Are  you  thinking  it's  about  a  good  time  to  have  a  lunch 

recess? 

TC [MAJ  FEIN]:  Yes,  ma'am. 
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MJ:  All  right.  Come  back  at  1330? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  Anything  we  need  to  address  before  recess? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  Your  Honor. 

MJ:  Court  is  in  recess. 

[The  court-martial  recessed  at  1214,  5  June  2013.] 

[The  court-martial  was  called  to  order  at  1343,  5  June  2013.] 

MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  present  when  the  Court  last  recessed  are  again  present  in 
court. 

Before  we  proceed,  I  just  wanted  to  set  for  the  record, 
counsel  and  I  met  briefly  in  an  R.C.M.  802  conference,  a  couple  of 
minutes  ago  counsel  reminded  me  that  two  of  the  witnesses  here  were 
testifying  grant  of  immunity.  One  of  the  witnesses,  I  just  want  to 
set  forth  for  the  record,  was  the  last  witness  who  testified  and  both 
sides  knew  about  the  immunity  agreement.  Is  that  correct? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

CDC [MR.  COOMBS]:  And,  yes.  Your  Honor. 

MJ:  And  both  sides  know  about  all  —  both  immunity  agreements; 

is  that  correct? 
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TC [MAJ  FEIN]:  Yes,  Your  Honor.  There's  one  still  pending,  a 
third. 

CDC [MR .  COOMBS]:  Yes,  Your  Honor. 

MJ:  Government,  are  you  ready  to  call  your  next  witness? 

ATC [CPT  WHYTE]:  The  United  States  calls  Chief  Warrant  Officer  3 
Hando  Hack. 

CHIEF  WARRANT  OFFICER  3  HANDO  HACK,  U.S.  Army,  was  called  as  a 
witness  for  the  government,  was  sworn  and  testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  And  you  are  Chief  Hando  Hack? 

A .  I  am . 

Q.  Chief,  what  is  your  current  position? 

A.  I'm  an  observer,  controller,  trainer  at  the  Joint 
Multinational  Readiness  Center. 

Q.  And  where  is  that  located? 

A.  It's  in  Germany. 

Q.  When  are  your  current  —  what  are  your  responsibilities  in 
that  position? 

A.  I  teach,  coach,  mentor  units  that  are  coming  for  semi¬ 
annual  training  or  getting  ready  to  deploy  and  then  I  also  enforce 
the  exercise  rules.  * 

Q.  How  long  have  you  been  in  that  position? 
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A. 

Q. 

A. 

Q. 

A. 

Q. 

A. 

Q. 

A. 

Q. 

A. 

Q. 

A. 

operator. 

Q. 

A. 

Q. 

A. 

Q. 

A. 

Q. 

A. 

Q. 


Two-and-a-half  years. 

What  is  your  branch.  Chief? 

I'm  Field  artillery. 

How  long  have  been  a  chief  warrant  officer? 

Close  to  9  years. 

What  did  you  do  before  that? 

I  was  also  field  artillery  branch,  forward  observer. 
Enlisted? 

Enlisted. 

When  did  you  enlist? 

It  was  October  1992. 

What  was  your  MOS  when  you  enlisted? 

Initially  it  was  13  Romeo  which  is  target  acquisition  radar 

How  long  were  you  13  Romeo? 

About  8  years. 

What  happened  after  those  8  years? 

I  reclassified  to  a  13  Fox,  Forward  Observer. 

How  long  were  you  at  13  Fox? 

Approximately  4  years. 

So  when  did  you  commission  as  a  warrant  officer? 

October  2004. 

What  training  did  you  receive  to  become  a  warrant  officer? 
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A.  Warrant  Officer  Candidate  School  initially  and  the  Warrant 
Officer  Basic  Course  at  Fort  Sill,  Oklahoma. 

Q.  When  did  you  graduate  Officer  Basic  Course? 

A.  It  was  June  of  2005. 

Q.  What  was  your  first  assignment  out  of  the  basic  course? 

A.  Fort  Drum,  New  York. 

Q.  When  did  you  arrive  there? 

A.  It  was  late  July/August  of  2005. 

Q.  What  was  your  position  when  you  arrived? 

A.  I  worked  on  the  Division  staff  as  field  artillery 
intelligence  officer. 

Q.  What  were  your  responsibilities  in  garrison? 

A.  It  was  primarily  attending  to  professional  military 
education  and  training. 

Q.  When  was  your  first  deployment  as  a  warrant  officer? 

A.  I  first  deployed  to  Bagram  Airbase  in  February  of  2006. 

Q.  What  was  your  position  during  this  deployment? 

A.  I  was  also  a  field  artillery  intelligence  officer. 

Q.  How  long  was  this  deployment? 

A.  A  year. 

Q.  When  was  your  second  deployment  as  a  warrant  officer? 

A.  It  was  to  Iraq.  I  was  stationed  at  Camp  Victory  in  2008. 
Q.  And  how  long  was  this  deployment? 
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A.  Roughly  7  months. 

Q.  Did  you  redeploy  somewhere? 

A.  Yes.  One  of  our  Brigades  in  the  10th  Mountain,  the  2nd 
Brigade,  10th  Mountain  had  a  vacancy  for  target  analyst  and  the  unit 
was  getting  ready  to  deploy  to  Afghanistan  and  I  went  down  to  fill 
that  vacancy. 

Q.  So  when  —  Where  did  you  deploy  with  2nd  Brigade? 

A.  We  deployed  to  Baghdad,  Iraq. 

Q.  To  what  forward  operating  base? 

A.  Hammer  —  FOB  Hammer. 

Q.  How  long  was  this  deployment? 

A.  I  was  there  about  7  months. 

Q.  What  predeployment  training  did  you  receive? 

A.  The  brigade  went  down  to  JRTC,  Fort  Polk,  Louisiana. 

Q.  What  is  JRTC? 

A.  It's  like  JMRC,  it's  one  of  the  three  combat  training 
centers . 


Q.  How  do  you  know  PFC  Manning? 

A.  When  we  went  to  the  JRTC,  that's  the  first  time  I  met  him. 

Q.  So  let's  talk  a  little  bit  about  JRTC.  Where  did  JRTC  take 

place? 

A.  Fort  Polk,  Louisiana. 

Q.  And  do  you  remember  when  this  was? 
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A.  It  would  have  been  April  2009. 

Q.  Did  PFC  Manning  attend  JRTC  with  you? 

A.  Yes. 

Q.  The  entire  period? 

A.  Yes. 

Q.  Where  did  you  work  at  JRTC? 

A.  I  worked  in  the  S-2  SCIF. 

Q.  And  where  did  PFC  Manning  work? 

A.  He  also  worked  in  the  SCIF. 

Q.  What  sections  was  he  assigned  to? 

A.  The  S-2. 

Q.  And  what  cell  within  the  S-2  was  he  assigned  to? 

A.  It's  the  all-source  or  fusion  cell. 

Q.  What  was  your  mission  at  JRTC? 

A.  As  the  target  analyst  I  worked  with  the  S-2  to  gather 
actionable  intelligence  on  high-value  targets  that  we  were  looking  to 
capture  during  the  exercise. 

Q.  Who  are  high-value  targets? 

A.  High-value  targets  are  individuals  from  threat  groups  that 
are  attacking  us  that  I  work  with  the  S-2  to  do  target-value  analysis 
and  then  we  develop  target  packets  on  them  to  facilitate  operations. 
Q.  So  what  happened  after  JRTC? 
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1  A.  After  JRTC,  we  came  back  to  Fort  Drum  and  went  through  more 

2  pre-deployment  prep. 

3  Q.  Did  you  deploy  to  the  2nd  Brigade? 

4  A.  Yes. 

5  Q.  When  did  you  deploy? 

6  A.  It  was  late  September  of  2009. 

7  Q.  Was  it  to  FOB  Hammer? 

8  A.  It  was  to  FOB  Hammer. 

9  Q.  Who  deployed? 

10  A.  The  entire  brigade. 

11  Q.  To  include  PFC  Manning? 

12  A.  Yes. 

13  Q.  So  let's  talk  about  your  time  at  FOB  Hammer.  Do  you 

14  remember  when  you  arrived  at  FOB  Hammer? 


15 

16 

17 

18 

19 

20 
21 
22 


It  was  early  October. 

What  was  your  job  title  at  FOB  Hammer? 

I  was  the  target  analyst. 

Where  did  you  work? 

I  worked  in  the  brigade  SCIF. 

Did  PFC  Manning  work  in  the  SCIF  with  you? 
He  did. 

What  type  of  analyst  was  PFC  Manning? 
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A.  He  was  very  organized.  He  had  very  organized  documents, 
things  like  that. 

Q.  As  far  as  the  threat  group,  what  type  of  analyst  was  he? 

A.  He  was  working  on  the  Shia  threat  groups. 

Q.  At  FOB  Hammer  what  was  your  AO,  your  area  of  operation? 

A.  Eastern  Baghdad.  It  extended  from  Sadr  city  all  the  way 
down  the  Solomon  Peninsula. 

Q.  What  role  did  Shia  analysts  play  with  the  targeting  mission 
at  FOB  Hammer? 

A.  They  were  to  provide  us  with  actionable  intelligence  as 
they  come  through  intel  reports,  those  would  be  uploaded  into  a 
target  folder  we  maintain  on  the  high-value  targets. 

Q.  As  a  Shia  analyst,  which  high-value  targets  was  PFC  Manning 
responsible  for  pulling  information  from? 

A.  We  had  a  high-value  target  list  which  contained 
approximately  25  individuals  from  the  Shia  threat  group  with  one  that 
was  actually  from  the  Sunni  threat  group. 

Q.  Could  you  explain  the  Shia  threat  in  your  AO  at  the  time? 

A.  Pretty  much  all  attacks  that  were  occurring  against  us  were 

from  the  Shia  threat  groups. 

Q.  So  let's  talk  about  the  targeting  mission  at  FOB  Hammer. 
What  was  the  targeting  mission  at  FOB  Hammer? 
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A.  The  targeting  mission  was  to  conduct  collaboration  with  the 
S-2  section  to  gather  actual  intelligence  on  the  individuals  we  were 
looking  for  and  then  provide  that  to  operation  channels  to  enable 
capture  operations  with  the  Iraqi  security  forces. 

Q.  You  were  at  the  brigade  level? 

A.  Yes. 

Q.  Who  are  high-value  targets  at  the  brigade  level? 

A.  At  the  brigade  level,  a  high-value  target  would  be  the 
equivalent  of  our  brigade  commander. 

Q.  What  did  you  provide  the  S-2  section  to  help  you  accomplish 
your  mission? 

A.  My  high-value  target  list. 

Q.  Can  you  explain  again  just  what  exactly  that  was? 

A.  It's  an  Excel  product.  It  has  the  picture  the  individual 

on  there.  It  has  the  actionable  criteria  that  we  use;  it  has  a  brief 
description,  physical  description,  summary,  of  the  significance  of 
this  target. 

Q.  How  many  high-value  targets  are  on  this  list? 

A.  There  was  a  total  of  25. 

Q.  Was  this  list  updated  throughout  the  deployment? 

A.  I  had  updated  weekly.  Whereas  we  captured  individuals  I 
would  update  it  then,  but  primarily  weekly. 

Q.  Did  you  PFC  Manning  have  you  target  list? 
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A.  He  did. 

Q.  How  do  you  know? 

A.  It  was  stapled  on  the  wall  in  front  of  his  work  station. 

Q.  So  just  a  second  ago  you  said  there  was  action  criteria  on 

this? 

A.  Yes. 

Q.  What  is  what  do  you  mean  by  action  criteria? 

A.  Action  criteria  is  what  we  use  to  establish  pattern  of  life 
for  the  individual  we're  looking  to  capture.  So  as  we  become  more 
predictive  in  the  patterns  of  this  individual  say  on  a  daily  basis, 
that  makes  this  target  more  actionable.  So  that  criteria  can  be 
measured  as  red,  amber,  green  and  when  we  get  to  within  say  a  75 
percent  threshold  of  green,  then  that  target  becomes  actionable  as  we 
know  within  the  next  12  to  24  hours  where  we  think  this  person  will 
be . 

Q.  So  why  did  you  provide  your  target  list  to  the  S-2  section? 

A.  I  provided  that  to  focus  collection.  These  targets  were 
some  legacy  targets  inherited  from  the  unit  before  us.  They  were  at 
about  a  50  to  60  percent  actionable  level.  So  what  I  needed  was  more 
current  information  from  the  intel  analyst  to  bring  that  criteria  up 
so  we  can  go  and  capture  these  individuals. 

Q.  Are  you  familiar  with  what  databases  the  intel  analyst  used 
to  find  intelligence  on  these  high-value  targets? 
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A.  They  used  a  couple  of  databases.  The  primary  databases  was 
CIDNE . 

Q.  What  is  stored  on  CIDNE? 

A.  CIDNE  is  essentially  a  repository  of  all  intel  reports, 
SIGACTs,  different  information  inside  of  the  Iraqi  theatre  of 
operations . 

Q.  Are  you  generally  familiar  with  how  a  SIGACT  is  created? 

A .  I  am . 

Q.  What  guidance  is  provided  on  what  qualifies  as  a  SIGACT? 

A.  The  commander  establishes  what  he  calls  commander's 

critical  intelligence  requirements.  That's  information  that  the 
commander  needs  to  make  a  decision.  If  a  SIGACT  occurs  that  meets 
that  threshold  or  that  criteria  then  that  information  needs  to  be 
reported  up  the  channels  to  the  brigade  commander  for  him  to  make  a 
decision  on  it. 

Q.  Can  you  explain  --  how  many  SIGACTs  have  you  seen  over  the 
course  of  your  career? 

A.  Over  the  course  of  my  career,  easily  over  200. 

Q.  Can  you  explain  the  general  format  of  a  SIGACT? 

A.  The  general  format  is  it  answers  the  five  Ws:  the  who  did 
this  happen  to,  where  was  it  located,  how  it  happened,  things  like 
that . 
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Q.  And  what  type  of  intelligence  on  high-value  targets  were 
important  to  the  targeting  a  mission? 

A.  Information  intel  reports  in  particular  that  were  tied  to 
any  type  of  SIGACT  that  occurred  that  would  be  information  that  I 
would  like  to  have  so  that  if  it  was  a  target  that  we  were  trying  to 
locate  and  I  already  had  a  target  folder  then  I  could  update  that 
target  folder  with  that  information  and  potentially  change  the 
actionable  criteria. 

Q.  Target  folder.  What  is  a  target  folder? 

A.  Every  high-value  target  we  have  what's  called  a  target 
folder.  It's  a  PowerPoint  document  that  contains  approximately  four 
to  five  slides,  has  all  the  biometric  data  that  we  have  available, 
contains  the  significant  reporting,  the  summary  of  reporting.  We 
maintain  them  on  every  high-value  target  that  we're  looking  for. 

Q.  Is  this  where  —  this  is  where  the  intelligence  is  stored? 

A.  Yes. 

Q.  For  the  high-value  targets? 

A.  Anything  tied  to  one  of  those  high-value  targets  is  up 
loaded  into  that  target  folder. 

Q.  What  did  you  do  with  that  targeting  list  after  all  the 
actionable  criteria  been  met? 

A.  That  information  was  passed  by  me  to  the  operations  channel 
of  the  brigade  S-3,  and  that  would  be  passed  down  and  coordinated 
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1  with  whatever  unit  was  on  the  ground  where  they  are  going  to  conduct 

2  the  CONOP. 

3  Q.  How  would  you  describe  your  role  between  the  S-2  section, 

4  intelligence  and  the  S-3  section  operations? 

5  A.  I'm  essentially  the  bridge  between  the  S-2  and  the  S-3  to 

6  facilitate  actionable  information  on  targets  and  target  folders  over 

7  to  the  operation  side  so  that  we  can  put  together  our  operations  to 

8  go  and  capture  these  high-value  targets. 

9  Q.  Chief,  let's  talk  about  PFC  Manning  as  a  35  Fox.  Are  you 

10  aware  of  any  strengths  of  PFC  Manning  as  an  intel  analyst? 

11  A.  As  I  said,  earlier  his  ability  to  organize. 

12  Q.  How  do  you  know  he  was  good  at  organizing? 

13  A.  For  about  the  first  30  days  everybody  in  the  unit  is  pretty 

14  much  getting  in  their  battalion  rhythm  and  processes.  So  after  about 

15  6  weeks  into  it,  I  started  to  kind  of  push  for  more  collection  on 

16  high-value  targets  list  going  on  the  T-drive,  which  is  available  to 

17  all  of  us  that  had  access  to  it,  I  could  go  and  take  a  look  at  the 

18  working  folders  of  the  intel  analyst  and  see  what  they've  been 

19  working  on. 


20 

Q. 

Did  you  go  in  PFC  Manning's  folder? 

21 

A. 

I  did. 

22 

Q. 

What  did  you  find? 
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A.  I  there  were  several  directories  and  subdirectories  and 
inside  of  each  one  of  these  were  intel  reports,  SIGACTs,  things  that 
were  tied  to  first  the  geographical  locations  peninsula.  Then  they 
were  tied  to  an  enemy  threat  group  that  we  were  looking  for.  It  very 
neatly  organized,  very  categorized. 

Q.  So  can  you  just  explain,  I  guess,  how  these  were 
categorized?  When  you  opened  up  his  folder,  how  were  they 
categorized? 

A.  It  was  first  alphabetically.  If  it  was  an  HR  or  a  DIIR, 
then  if  it  was  —  if  it  was  a  SIGACT  then  it  was  by  numerical  or  by 
date . 

Q.  Did  he  have  subfolders  within? 

A.  He  did. 

Q.  What  are  some  of  those? 

A.  It  was  the  subfolder  would  be  the  threat  group  itself. 

First  it  would  be  a  folder  that  would  be  say  Qatar  Peninsula  itself 
and  underneath  that  there  would  be  one  or  two  on  subfolders  that 
would  have  the  groups  that  are  in  that  geographical  location. 

Q.  How  much  information  was  contained  in  his  folders? 

A.  I  didn't  look  at  all  of  them.  I  would  say  the  one  folder 

that  I  looked  at  in  particular  there  was  anywhere  from  25  to  30  intel 
reports  that  were  in  there. 
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Q.  An  unclassified  setting,  what  folder  did  you  look  in  and 
what  did  you  find? 

A.  It  was  the  one  of  the  threat  groups  in  the  Qatar  Peninsula, 
in  particular  that  had  individuals  that  was  on  the  high-value  target 
list.  I  was  looking  in  that  folder  in  particular  to  see  if  any  of 
these  reports  were  tied  to  any  high-value  targets  that  we  had  on  our 
list  that  we  were  looking  for. 

Q.  You  said  you've  been  in  the  military  for  20-plus  years? 

A.  Twenty  years. 

Q.  And  in  your  career  have  you  ever  seen  a  Soldier  as 
organized  and  cataloged  as  PFC  Manning? 

A.  I've  seen  a  lot  of  organized  Soldiers,  but  not  that  level 
of  detail  with  the  type  of  information  that  he  had  in  those  folders. 

I  just  never  seen  an  analyst  that  kept  that  much  reports. 

Q.  What  did  you  do  after  seeing  PFC  Manning's  catalog  folder? 

A.  When  we  came  on  shift  the  next  day,  I  asked  PFC  Manning  at 

the  time,  I  said,  "Take  a  look  at  the  high-value  target  list.  I'd 
like  you  to  find  some  information  for  me  on  these  high-value 
targets . " 

Q.  What  did  PFC  Manning  do  in  response? 

A.  The  next  day  he  —  during  shift  change  he  —  we  were  sitting 
down  and  he  said,  "Chief,  I  sent  you  a  report  that  I  found,"  and  he 
sent  me  an  e-mail. 
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Q.  Do  you  remember  getting  this  email? 

A.  I  do. 

Q.  Do  you  remember  about  what  time  frame  this  was  in  the 
deployment? 

A.  Early  January. 

Q.  And  on  what  network  was  this  email  sent? 

A.  It  was  the  SIPRNET . 

Q.  And,  again,  in  unclassified  terms,  can  you  explain  what 
this  email  generally  consisted  of? 

A.  It  was  I  think  a  one  sentence  summary  that  Manning  had  put 
on  there.  It  was  a  report  that  had  been  pulled  off  of  the  CIDNE 
database.  It  was  a  SIGACT  and  it  also  contained  a  S-2  assessment  of 
the  event.  This  information  was  already  over  2  years  old  from  the 
time  that  we  had  arrived  and  the  assessment  was  from  the  previous 
unit  that  we  had  replaced,  and  the  assessment  piece  was  that  the  name 
of  one  of  the  high-value  targets  that  we  had  on  our  list  currently. 

Q.  How  do  you  know  it  was  a  SIGACT? 

A.  Just  from  the  format.  The  unit  —  you  know,  it  answered 
the  five  Ws,  but  it  was  more  a  refined  SIGACT  with  actual  S-2 
assessment  attached  to  it. 

ATC [CPT  WHYTE]:  Let  the  record  reflect  I'm  retrieving 

Prosecution  Exhibit  58  for  Identification  [retrieving  PE  58  for  ID] . 
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Chief  Hack,  at  this  point  if  I  could  have  you  just  move 
over  to  the  panel  box. 

[The  witness  exited  the  witness  stand  and  moved  to  the  panel  box.] 
ATC [CPT  WHYTE]:  Let  the  record  reflect  I'm  handing  the 

witness  what's  been  marked  as  Prosecution  Exhibit  —  actually,  can 
you  hold  that  in  your  lap  while  you're  reviewing  it? 

WIT:  Sure.  No  problem. 

ATC [CPT  WHYTE]:  Let  the  record  reflect  that  I've  handed  the 

witness  Prosecution  Exhibit  58  for  Identification  [handing  PE  58  for 
ID  to  the  witness] . 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Chief  Hack,  please  look  over  that  document  and  let  me  know 
when  you're  finished? 

[The  witness  reviewed  the  document.] 

A.  Okay. 

Q.  Chief,  during  the  next  couple  of  questions,  if  I  ask  you  a 
question  and  you  feel  the  need  to  illicit  classified  information  in 
response,  please  let  me  know. 

A.  Okay. 

Q.  Chief,  what  is  this  document? 

A.  It's  an  email  I  received  from  Manning. 

Q.  How  do  you  know  this  is  the  email  you  received  from 
Manning? 
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A.  The  header  it  has  standard  "to"  and  "from."  It's  from  him, 
it's  to  me.  It's  got  the  one  sentence  summary.  It  contains  a  CIDNE 
report . 

MJ:  Just  a  moment.  Yes. 

CDC [MR .  COOMBS]:  Your  Honor,  we  would  stipulate  that  this  is 

an  email  from  PFC  Manning  to  Chief  Hack.  If  there  are  questions  on 

the  email  and  counsel  needs  to  do  that  - 

MJ:  So  you've  got  no  objections  to  its  admissibility? 

CDC [MR .  COOMBS]:  No  objections.  Your  Honor. 

MJ:  All  right. 

ATC [CPT  WHYTE]:  Okay.  So  at  this  time  the  United  States 

offers  it  into  evidence. 

MJ:  All  right.  Let  me  see  it. 

ATC [CPT  WHYTE]:  I'm  retrieving  Prosecution  Exhibit  58  for 
Identification  from  the  witness  [retrieving  PE  58  for  ID  from  the 
witness  and  handing  to  the  military  judge.] 

MJ:  Prosecution  Exhibit  58  for  Identification  is  admitted.  Is 

it  marked? 

[The  witness  resumed  his  seat  at  the  witness  stand.] 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Chief  Hack,  what  was  the  classification  level  of  this 
email? 

A.  It  was  a  Secret. 
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Q.  How  do  you  know  that  was  Secret? 

A.  It  had  the  Secret  caveat  in  the  email  itself. 

Q.  Are  you  familiar  with  how  someone  classifies  an  e-mail  on 
SIPRNET? 

A.  Yes. 

Q.  Can  you  explain  that? 

A.  Microsoft  Outlook  that's  used  on  the  SIPRNET,  before  you 
can  send  an  email  to  somebody  else,  you  first  have  to  —  it  prompts 
you  to  classify  the  information.  After  you  classify  it,  then  you 
have  to  also  attach  a  caveat  to  that  information. 

Q.  And,  again,  can  you  just  explain  what  this  --  in  general 
unclassified  terms  what  this  SIGACT  was? 

A.  It  was  a  IED  attack  that  had  occurred  a  unit  that  was  in 
the  same  area  of  operations  that  we  now  had.  It  had  occurred  over  2 
years  prior  to  us  arriving,  but  the  information  described  the  type  of 
attack,  the  weapon  system  that  was  used,  any  time  of  damage, 
equipment,  things  like  that,  and  at  the  end  it  had  the  S-2  assessment 
of  the  event  itself. 

Q.  What  did  the  target  have  to  do  with  targeting? 

A.  It  contained  the  name  —  the  S-2  assessment  itself 
contained  the  name  of  the  one  of  the  high-value  targets  that 
currently  looking  for  that  was  on  the  list. 
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Q.  You  said  you  received  an  email  in  January  and  you  arrived 
in  October? 

A.  Correct. 

Q.  During  this  time  how  much  information  did  PFC  Manning  give 
you  on  high-value  targets? 

A.  None. 

Q.  How  many  Shia  high-value  targets  were  on  the  targeting 

list? 

A.  Approximately  23  out  of  25. 

Q.  So  can  you  explain  how  important  a  Shia  analyst  is  to  the 
targeting  mission? 

A.  The  Shia  analysts  are  very  important  given  the  fact  that 
just  about  all  attacks  that  are  occurring  on  our  units  in  Eastern 
Baghdad  were  by  the  Shia  threat  group.  We  had  hardly  any  Sunni 
threat  group  attacks  on  our  forces  in  Eastern  Baghdad. 

Q.  Chief,  do  you  remember  when  you  went  on  R  and  R? 

A.  It  was  about  mid-February  of  2010. 

Q.  What  happened  when  you  were  on  R  and  R? 

A.  I  remember  I  was  watching  the  Winter  Olympics  at  that  time. 
After  we  got  done  watching  a  hockey  match,  ABC  news  came  on.  Their 
lead  story  was  a  video  of  Apaches  flying  around  in  Baghdad  that  had 
been  shooting  at  civilians  as  they  described  it. 

Q.  How  did  you  react  to  this  video? 
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A.  I'd  seen  the  video  before.  I  was  surprised  now  to  see  it 
on  ABC  news. 

Q.  When  did  you  first  see  this  video? 

A.  I  would  have  been  probably  late  December  of  2009. 

Q.  And  where  did  you  see  this  video? 

A.  It  was  on  our  T-drive. 

Q.  And  that's  on  the  SIPRNET? 

A.  Yes. 

ATC [CPT  WHYTE]:  We  have  no  more  questions.  Your  Honor. 

MJ:  Okay. 

CROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Chief  Hack,  how  are  you? 

A.  Good.  Might  have  some  jet  lag,  that's  about  it. 

Q.  I  understand. 

A.  Just  a  few  questions  for  you.  In  late  October  Specialist 
Showman  was  assigned  to  work  for  you  in  targeting;  is  that  correct? 
A.  She  was. 

Q.  Now,  that  was  because  you  could  not  accomplish  everything 
that  you  needed  to  get  done  by  yourself? 

A.  Correct. 

Q.  Now,  you  basically  needed  help  in  targeting? 

A.  Yes.  It  was  not  a  one-man  operation. 
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Q.  And  you  had  limited  interaction  with  PFC  Manning;  is  that 
correct? 


A.  That's  correct. 

Q.  The  majority  of  the  deployment  you  saw  PFC  Manning  for 
about  15  minutes  a  day? 

A.  Yes. 

Q.  That  was  because  you  worked  on  the  day  shift  and  PFC 
Manning  worked  on  the  night  shift? 

A.  Correct. 

Q.  And  even  though  your  desks  were  next  to  each  other,  other 
than  the  15  minutes  a  day  —  well,  actually  your  desks  were  next  to 
each  other,  right? 

A.  Yes. 

Q.  That  15  minutes  a  day  was  basically  during  the  shift 
change? 

A.  Correct. 

Q.  And  that  was  pretty  the  extent  of  your  interaction  with  PFC 


Manning? 

A.  Yes. 

Q.  And  you  were  not  part  of  the  S-2  section,  correct? 
A.  No. 

Q.  You  worked  in  the  targeting  section? 
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1  A.  I  did.  It's  one  of  the  peripheral  sections  not  actually  on 

2  an  MTOE  of  the  S-2  section. 

3  Q.  And  would  you  agree  with  me  that  the  S-2  section  was 

4  responsible  for  getting  information  to  you? 

5  A.  Yes. 

6  Q.  You  had  used  the  information  that  they  gave  to  you  for  your 

7  high-value  target  list? 

8  A.  Yes,  I  would. 

9  Q.  You  basically  kind  of  viewed  yourself  as  a  customer  that 

10  needed  information  from  the  S-2  section  to  do  your  job? 

11  A.  That's  correct. 

12  Q.  And  the  S-2  section  did  not  do  a  good  job  of  giving  you 

13  information? 

14  A.  We  did  not  receive  a  lot  of  information  from  the  S-2 

15  section.  It  was  more  of  a  pull  versus  a  push  when  it  came  to  getting 

16  information  out  of  the  S-2. 

17  Q.  And  that  problem  really  was  a  problem  with  the  S-2  section 

18  as  a  whole,  correct? 

19  A.  I  could  say,  yes.  It  was  not  just  one  section;  it  was 

20  pretty  much  all  sections  within  the  S-2,  SCIF  that  I  needed 

21  information  from  and  we  weren't  getting  a  whole  lot. 
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Q.  And,  as  you  said,  you  kind  of  viewed  yourselves  as  a 
customer  that  should  be  getting  information  pushed  to  you,  but  you 
had  to  pull  for  that  information? 

A.  That's  correct. 

Q.  You  had  problems  with  then  Staff  Sergeant  Balonek  giving 
you  information  too,  didn't  you? 

A.  He  was  the  other  Shia  analyst,  and  we  also  were  not 
receiving  a  lot  of  information  back. 

Q.  And  you  had  problems  with  CW2  Ehresman  giving  you 
information  too? 

A.  He  was  essentially  the  shop  foreman  and  was  not  pushing  the 
analysts  to  support  targeting. 

Q.  You  were  trying  to  pull  that  information  from  the  S-2 
section  and  even  that  you  were  trying  to  do  it,  they  never  were 
really  giving  you  that  information,  they  never  really  pushed  that 
information  to  you? 

A.  We  had  whether  the  exception  of  the  S-2  acquisition,  which 
is  the  HUMINT  cell,  yes,  I  had  to  pretty  much  pull  all  of  the 
information  I  needed  from  the  other  sections  that  were  in  there. 

Q.  And  that  was  a  source  of  frustration  for  you? 

A.  Yes. 

Q.  That  frustration  applied  to  all  analysts  in  the  in  the  S-2 
SCIF  or  S-2  section? 
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A.  I  would  say  that  yes,  it  was  more  of  a  frustration  with  the 
leadership  not  pushing  the  analysts  to  support  targeting. 

Q.  And  that  frustration  also  applied  to  the  HUMINT  and  the 
SIGACT  sections  of  the  S-2  section  as  well? 

A.  Not  so  much  the  HUMINT,  but  the  SIGACT  section,  yes. 

Q.  So  I  guess  certainly  frustration  certainly  was  not  limited 
to  PFC  Manning? 

A.  No. 

Q.  And  PFC  Manning  wasn't  your  end  all  be  all  for  getting 
information  from  the  S-2  section,  was  he? 

A.  No,  he  was  not. 

Q.  Towards  the  end  of  the  December  time  frame  you  started 
going  around  to  the  S-2  section  and  basically  kind  of  pointing  the 
finger  in  there  saying,  "Get  me  some  information?" 

A.  I  went  around  to  each  section  and  reiterated  the  importance 
of  high-value  target  list  that  that  document  was  provided  to  them  to 
focus  their  collect  action  so  that  I  could  get  more  intelligence  that 
I  was  looking  for  to  operating  these  high-value  targets. 

Q.  And  even  though  you  did  that,  things  really  didn't  improve, 
did  they? 

A.  They  did  not. 

ATC [CPT  WHYTE]:  Objection.  What's  the  relevance  of  this 

line  of  questions? 
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MJ:  What's  the  relevance? 

CDC [MR .  COOMBS]:  Relevance  is  I  believe  that  the  government 

in  their  direct  tried  to  portray  PFC  Manning  as  failing  in  providing 
information  to  Chief  Hack  for  high-value  targets. 

MJ:  That's  what  your  using  to  rebut  —  that's  what  the 

government  did. 

ATC [CPT  WHYTE]:  Excuse  me.  Your  Honor? 

MJ:  Was  part  of  the  intent  of  the  government's  direct  to  show 

what  Mr.  Coombs  just  said  that  PFC  Manning  was  failing  to  provide 
reports . 

ATC [CPT  WHYTE]:  Not  entirely.  Your  Honor,  no. 

MJ:  But  some  of  it? 

ATC [CPT  WHYTE]:  Some  of  it,  yes. 

M J :  Overruled. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  So  shortly  after  this  you  decided  that  you  would  take 
matters  into  your  own  hands;  is  that  correct? 

A.  Myself  and  my  assistant  at  the  time.  Specialist  Showman.  We 
took  it  upon  ourselves  to  do  the  job  of  the  intel  analysts  by  culling 
reports  and  things  like  that  to  get  the  information  we  needed. 

Q.  So  instead  of  relying  on  the  intel  analyst  in  the  S-2 
section  you  and  Specialist  Showman  started  to  do  the  work  yourself? 

A.  That's  correct. 
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Q.  And  you  understand  —  I  guess  you're  understanding  what  the 
analysts  are  supposed  to  be  doing  was  to  be  combing  through  the 
SIGACTs,  pulling  the  HUMINT  and  SIGACT  reports  and  finding 
information  on  the  kind  of  the  high-value  targets,  the  so  what,  and 
then  giving  that  to  you? 

A.  Yes. 

Q.  You  didn't  want  them  to  flood  you  with  a  whole  bunch  of 
irrelevant  data;  is  that  right? 

A.  No,  we  did  not.  It  was  a  two-man,  two-person  section. 

Q.  However,  the  way  the  S-2  section  seemed  to  be  seeing  itself 
as  supporting  you  was  basically  saying,  "Here  you  go.  Chief,  here's 
12  reports?" 

A.  They  wouldn't  send  them  to  me,  they  would  go  to  Specialist 
Showman  and  it  was  essentially  just  intel  reports  either  forwarded  or 
not  necessarily  correlated  to  any  high-value  targets  we  were  looking 
for. 

Q.  And  there  was  no  in-depth  analysis  behind  the  reporting 
that  they  were  sending  you? 

A.  No. 

Q.  Kind  of  like  the  document  that  Colonel  Lind  is  looking  at, 
the  one  the  government  just  introduced  into  evidence,  the  email  you 
got  from  PFC  Manning,  that  was  kind  of  the  example  of  what  you  recall 
getting  back,  just  kind  of  like  here's  a  document,  you  figure  it  out. 
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1  A.  That  document  in  particular  had  the  name  of  one  of  the 

2  high-value  targets  we  were  looking  for,  but  a  lot  of  information  we 

3  were  getting  forwarded  to  us  was  not  even  relevant  to  any  high-value 

4  targets  we  were  looking  for. 

5  Q.  So  PFC  Manning's  documents  sent  to  you  at  least  had  some 

6  relevance? 

7  A.  It  did  have  a  name  of  the  individual  we  were  looking  for. 

8  The  only  problem  was  that  it  was  dated  material,  over  2  years  before 

9  we  even  showed  up  in  the  Eastern  Baghdad  area. 

10  Q.  With  regards  to  PFC  Manning,  you  viewed  him  as  a  junior 

11  analyst,  did  you  not? 

12  A.  I  did. 

13  Q.  So  you  wouldn't  be  surprised  if  he  wasn't  great  at  giving 

14  you  kind  of  the  so  what? 

15  A.  I  would  not. 

16  Q.  At  one  point  —  well  the  person  you  would  be  surprised  at 

17  not  getting  you  that  would  be  Staff  Sergeant  Balonek? 

18  A.  That's  correct. 

19  Q.  You  would  expect  that  he  would  be  giving  you  the 

20  information  that  you  wanted? 

21  A.  Correct. 

22  Q.  And  at  one  point  you  went  to  Captain  Martin,  who  was  then 

23  the  assistant  S-2  and  complained? 
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A.  I  went  to  her  and  I  said,  you  know  that  the  targeting 
effort  here  is  just  not  being  supported.  So  I  asked  her  to  help  me 
out  talking  to  the  section  chiefs  to  get  the  analysts  to  push  us  more 
relevant  information,  not  just  send  us  reports  from  wherever  they're 
getting  them  from. 

Q.  But  the  problem  again  really  never  improved? 

A.  It  did  not. 

MJ:  Mr.  Coombs,  could  I  ask  something  here.  This  isn't  a 

dereliction  of  duty  case.  I  got  your  point.  Do  we  need  to  continue 
down  this  road? 

CDC [MR.  COOMBS]:  Just  to  ensure  that  one  of  the  government's 

arguments  ma'am,  is  somehow  that  PFC  Manning  was  derelict  in  his 
duties  because  he  was  somehow  working  for  WikiLeaks  instead  of  doing 
what  he's  supported  to  be  during.  That's  why  they  elicited  from  this 
witness  how  organized  he  was,  but  how  little  information.  So  I 
wanted  to  get  the  point  that  it  wasn't  just  PFC  Manning. 

MJ:  I  got  it. 

[Examination  of  the  witness  continued.] 

Q.  Now,  I  wanted  to  talk  about  that  organization  that  you  —  I 
guess  the  organizational  skills  that  you  of  saw  PFC  Manning  on  the  T 
drive.  Okay? 

A.  Okay. 
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Q.  Now,  the  T-drive  was  a  drive  that  everyone  could  have 
access  to? 

A.  Everybody  that  had  SIPRNET  access  could  access  the  T-drive. 

Q.  And  the  whole  point,  I  guess,  of  the  T-drive  was  you  could 
put  information  in  there  so  that  other  people  could  get  to  it? 

A.  Yes,  it's  a  collaborative. 

Q.  And  everyone  knew  that  that  was  a  shared  t  drive  and 
everyone  could  look  at  what  was  on  the  T-drive? 

A.  Yes. 

Q.  So  if  you  put  stuff  on  the  T-drive,  the  point  was  then 
other  people  could  go  to  your  stuff  and  use  it  as  well? 

A.  Yes. 

Q.  You  said  you  went  and  you  saw  the  organizational  skills  of 
PFC  Manning  and  that  you  said  that  that  was  very  organized;  is  that 
correct? 

A.  Yes.  I  was  interested  to  see  what  he  had  been  working  on 
on  the  night  shift  since  we  only  had  15  minutes  of  interaction  each 
day.  So  I  went  in  there,  I  took  a  look  at  what  was  in  the  folders  and 
the  subfolder  and  I  was  impressed  of  the  organizational  and  the 
structure  and  the  information  that  was  in  them. 

Q.  Would  it  be  fair  to  say  that  it  would  take  guite  a  bit  of 
time  to  do  what  you  see  PFC  Manning  do? 

A.  Yes. 
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Q.  So  that  would  be  —  well,  you  also  looked  at  I  believe 
Staff  Sergeant  Balonek's  folder  too  on  the  T-drive? 

A.  I  did. 

Q.  Did  you  see  similar  organization  there? 

A.  No.  Not  even  close. 

Q.  So  at  least  from  the  two  PFC  Manning  seemed  to  be  doing  a 
lot  more  work  on  the  T-drive? 

A.  He  did. 

Q.  With  regards  to  getting  information  to  you,  could  you  order 
PFC  Manning  to  do  something  and  get  you  information? 

A.  I  was  not  in  the  chain  of  command.  I  could,  if  necessary, 
but  I  didn't  see  that  as  necessary  for  me  to  do  that.  I  would  go 
through  the  chain  of  command  to  get  something  fixed. 

Q.  And  as  far  as  supporting  you  then  that  would  be  the  S-2 
chain  of  command  priority  to  do  that  or  not? 

A.  Yes. 

Q.  Did  there  come  a  time  when  you  left  the  SCIF  and  you  moved 
out  of  the  SCIF? 

A.  I  moved  out  of  the  SCIF  in  late  March  of  2010. 

Q.  Where  did  you  go  to  then? 

A.  Pretty  much  across  the  hallway  back  to  the  fire  cell  that  I 
belonged  to. 

Q.  What  was  your  job  at  that  point  in  time? 
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